Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.jackrabbit/oak-core@0.5
Typemaven
Namespaceorg.apache.jackrabbit
Nameoak-core
Version0.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.0.0
Latest_non_vulnerable_version1.24.0
Affected_by_vulnerabilities
0
url VCID-u5zn-2jp1-97h2
vulnerability_id VCID-u5zn-2jp1-97h2
summary 
Improper Input Validation
Remote attackers could execute Object-Graph Navigation Language (OGNL) statements and modify server-side context objects, as demonstrated by use of a `#` representation for the `#` character.
references
0
reference_url http://fisheye6.atlassian.com/cru/CR-9
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://fisheye6.atlassian.com/cru/CR-9
1
reference_url http://fisheye6.atlassian.com/cru/CR-9/
reference_id
reference_type
scores
url http://fisheye6.atlassian.com/cru/CR-9/
2
reference_url http://issues.apache.org/struts/browse/WW-2692
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://issues.apache.org/struts/browse/WW-2692
3
reference_url http://jira.opensymphony.com/browse/XW-641
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://jira.opensymphony.com/browse/XW-641
4
reference_url http://osvdb.org/49732
reference_id
reference_type
scores
url http://osvdb.org/49732
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6504.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-6504.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-6504
reference_id
reference_type
scores
0
value 0.65118
scoring_system epss
scoring_elements 0.98486
published_at 2026-04-21T12:55:00Z
1
value 0.65118
scoring_system epss
scoring_elements 0.98465
published_at 2026-04-01T12:55:00Z
2
value 0.65118
scoring_system epss
scoring_elements 0.98467
published_at 2026-04-02T12:55:00Z
3
value 0.65118
scoring_system epss
scoring_elements 0.9847
published_at 2026-04-04T12:55:00Z
4
value 0.65118
scoring_system epss
scoring_elements 0.98471
published_at 2026-04-07T12:55:00Z
5
value 0.65118
scoring_system epss
scoring_elements 0.98475
published_at 2026-04-08T12:55:00Z
6
value 0.65118
scoring_system epss
scoring_elements 0.98476
published_at 2026-04-09T12:55:00Z
7
value 0.65118
scoring_system epss
scoring_elements 0.98479
published_at 2026-04-11T12:55:00Z
8
value 0.65118
scoring_system epss
scoring_elements 0.98478
published_at 2026-04-13T12:55:00Z
9
value 0.65118
scoring_system epss
scoring_elements 0.98484
published_at 2026-04-16T12:55:00Z
10
value 0.65118
scoring_system epss
scoring_elements 0.98485
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-6504
7
reference_url http://secunia.com/advisories/32495
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/32495
8
reference_url http://secunia.com/advisories/32497
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/32497
9
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/46328
10
reference_url https://fisheye6.atlassian.com/cru/CR-9/#CFR-8
reference_id
reference_type
scores
url https://fisheye6.atlassian.com/cru/CR-9/#CFR-8
11
reference_url https://issues.apache.org/jira/browse/WW-2692
reference_id
reference_type
scores
url https://issues.apache.org/jira/browse/WW-2692
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-6504
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2008-6504
13
reference_url http://struts.apache.org/2.x/docs/s2-003.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://struts.apache.org/2.x/docs/s2-003.html
14
reference_url http://struts.apache.org/release/2.2.x/docs/s2-003.html
reference_id
reference_type
scores
url http://struts.apache.org/release/2.2.x/docs/s2-003.html
15
reference_url http://web.archive.org/web/20081119232431/jira.opensymphony.com/browse/XW-641
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://web.archive.org/web/20081119232431/jira.opensymphony.com/browse/XW-641
16
reference_url http://web.archive.org/web/20111023074138/http://jira.opensymphony.com/browse/XW-641
reference_id
reference_type
scores
url http://web.archive.org/web/20111023074138/http://jira.opensymphony.com/browse/XW-641
17
reference_url http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-9
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-9
18
reference_url http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-9/
reference_id
reference_type
scores
url http://web.archive.org/web/20130807023152/https://fisheye6.atlassian.com/cru/CR-9/
19
reference_url http://www.securityfocus.com/bid/32101
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/32101
20
reference_url http://www.vupen.com/english/advisories/2008/3003
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2008/3003
21
reference_url http://www.vupen.com/english/advisories/2008/3004
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2008/3004
22
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1123726
reference_id 1123726
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1123726
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.0:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11.1:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.11.2:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.2:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.3:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.4:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.5:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.6:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.7:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.8:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.0.9:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.0:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.1:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.2:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.3:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.4:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.5:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.0.5:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.0.5:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.1.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.1.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.1.0:*:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.1.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:opensymphony:xwork:2.1.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:opensymphony:xwork:2.1.1:*:*:*:*:*:*:*
43
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32564.txt
reference_id CVE-2008-6504;OSVDB-49732
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/32564.txt
44
reference_url https://www.securityfocus.com/bid/32101/info
reference_id CVE-2008-6504;OSVDB-49732
reference_type exploit
scores
url https://www.securityfocus.com/bid/32101/info
45
reference_url https://github.com/advisories/GHSA-wxw2-2mx5-c5qf
reference_id GHSA-wxw2-2mx5-c5qf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wxw2-2mx5-c5qf
fixed_packages
0
url pkg:maven/org.apache.jackrabbit/oak-core@1.0.0
purl pkg:maven/org.apache.jackrabbit/oak-core@1.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jackrabbit/oak-core@1.0.0
1
url pkg:maven/org.apache.jackrabbit/oak-core@2.1.3
purl pkg:maven/org.apache.jackrabbit/oak-core@2.1.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jackrabbit/oak-core@2.1.3
aliases CVE-2008-6504, GHSA-wxw2-2mx5-c5qf
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u5zn-2jp1-97h2
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jackrabbit/oak-core@0.5