Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/privacyidea@2.6.dev4
Typepypi
Namespace
Nameprivacyidea
Version2.6.dev4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.23.2
Latest_non_vulnerable_version2.23.2
Affected_by_vulnerabilities
0
url VCID-tusy-zs8z-bfgm
vulnerability_id VCID-tusy-zs8z-bfgm
summary privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.
references
0
reference_url https://github.com/advisories/GHSA-7qqv-r2q4-jxhm
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-7qqv-r2q4-jxhm
1
reference_url https://github.com/privacyidea/privacyidea
reference_id
reference_type
scores
url https://github.com/privacyidea/privacyidea
2
reference_url https://github.com/privacyidea/privacyidea/commit/a3edc09beffa2104f357fe24971ea3211ce40751
reference_id
reference_type
scores
url https://github.com/privacyidea/privacyidea/commit/a3edc09beffa2104f357fe24971ea3211ce40751
3
reference_url https://github.com/privacyidea/privacyidea/issues/1227
reference_id
reference_type
scores
url https://github.com/privacyidea/privacyidea/issues/1227
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/privacyidea/PYSEC-2018-20.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/privacyidea/PYSEC-2018-20.yaml
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1000809
reference_id CVE-2018-1000809
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1000809
fixed_packages
0
url pkg:pypi/privacyidea@2.23.2
purl pkg:pypi/privacyidea@2.23.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/privacyidea@2.23.2
aliases CVE-2018-1000809, GHSA-7qqv-r2q4-jxhm, PYSEC-2018-20
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tusy-zs8z-bfgm
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/privacyidea@2.6.dev4