| Package | Affected versions | Patched versions |
|---|---|---|
| recurly-api-client | ≥ 1.1.0, < 1.1.10≥ 1.2.0, < 1.2.8≥ 1.3.0, < 1.3.2≥ 1.4.0, < 1.4.14≥ 1.5.0, < 1.5.3≥ 1.6.0, < 1.6.2≥ 1.7.0, < 1.7.1≥ 1.8.0, < 1.8.1< 1.0.1 | 1.1.101.2.81.3.21.4.141.5.31.6.21.7.11.8.11.0.1 |
| recurly client .net | = 1.0.0= 1.0.0.1= 1.0.0.2= 1.0.0.3= 1.0.0.4= 1.1.0= 1.1.1= 1.1.4= 1.1.5= 1.1.6= 1.1.7= 1.1.8= 1.1.9= 1.2.0= 1.2.1= 1.2.2= 1.2.5= 1.2.6= 1.2.7= 1.3.0= 1.3.1= 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.2= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5.0= 1.6.0= 1.6.1= 1.7.0= 1.8.0 |
The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free