CVE-2017-0906
CriticalSummary
The Recurly Client Python Library before versions 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the 'Resource.get' method that could result in compromise of API keys or other critical resources.
Risk Assessment
The organization may be exposed to the loss of sensitive data, such as API keys, which could lead to unauthorized access to resources.
Recommendation
It is recommended to update the Recurly client library to the latest version to mitigate this vulnerability.
Original NVD description (English source)
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.