CVE-2026-105782
개요
A flaw was found in Scrapy. A remote attacker controlling a malicious website can cause a Denial of Service (DoS) by providing a specially crafted Referrer-Policy HTTP response header. When processing the response, the RefererMiddleware treats the header value as a Python import path and executes the referenced object, enabling the attacker to terminate the crawling process.
내용
Red Hat Product Security has rated this vulnerability as Important because an untrusted remote web server can trigger an unauthenticated denial of service against crawling processes. When a spider ingests an HTTP response with a crafted header, the framework resolves and executes arbitrary module paths, causing immediate termination of the scraping job. In typical deployments, this risk specifically impacts crawlers processing external or untrusted web destinations. Spiders scraping only internal, authenticated, or trusted sources are not exposed.
취약점 이해 (CWE)
Integrity,Confidentiality,Availability,Other
Technical Impact: Execute Unauthorized Code or Commands; Alter Execution Logic
The attacker might be able to execute code that is not directly accessible to the attacker. Alternately, the attacker could call unexpected code in the wrong place or the wrong time, possibly modifying critical system state.
Availability,Other
Technical Impact: DoS: Crash, Exit, or Restart; Other
The attacker might be able to use reflection to call the wrong code, possibly with unexpected arguments that violate the API (CWE-227). This could cause the product to exit or hang.
Confidentiality
Technical Impact: Read Application Data
By causing the wrong code to be invoked, the attacker might be able to trigger a runtime error that leaks sensitive information in the error message, such as CWE-536.
