CVE-2017-0907
CriticalSummary
The Recurly Client .NET Library before versions 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery due to incorrect use of 'Uri.EscapeUriString'. This could lead to compromise of API keys or other critical resources.
Risk Assessment
An attacker could exploit this vulnerability to gain access to sensitive data, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update the Recurly client library to the latest version to mitigate this vulnerability and conduct a security audit of applications using this library.
Original NVD description (English source)
The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.