Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/maikuolan/phpmussel@1.4.0
Typecomposer
Namespacemaikuolan
Namephpmussel
Version1.4.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.6.0
Latest_non_vulnerable_version1.6.0
Affected_by_vulnerabilities
0
url VCID-nqwf-t1an-27e9
vulnerability_id VCID-nqwf-t1an-27e9
summary 
Deserialization of Untrusted Data
phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP's phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don't use PHP's phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-4043
reference_id
reference_type
scores
0
value 0.01568
scoring_system epss
scoring_elements 0.81852
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-4043
1
reference_url https://github.com/phpMussel/phpMussel
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel
2
reference_url https://github.com/phpMussel/phpMussel/commit/97f25973433921c1f953430f32d3081adc4851a4
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel/commit/97f25973433921c1f953430f32d3081adc4851a4
3
reference_url https://github.com/phpMussel/phpMussel/issues/167
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel/issues/167
4
reference_url https://github.com/phpMussel/phpMussel/pull/173
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel/pull/173
5
reference_url https://github.com/phpMussel/phpMussel/security/policy#currently-known-vulnerabilities
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel/security/policy#currently-known-vulnerabilities
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-4043
reference_id CVE-2020-4043
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-4043
7
reference_url https://github.com/advisories/GHSA-qr95-4mq5-r3fh
reference_id GHSA-qr95-4mq5-r3fh
reference_type
scores
url https://github.com/advisories/GHSA-qr95-4mq5-r3fh
8
reference_url https://github.com/phpMussel/phpMussel/security/advisories/GHSA-qr95-4mq5-r3fh
reference_id GHSA-qr95-4mq5-r3fh
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/phpMussel/phpMussel/security/advisories/GHSA-qr95-4mq5-r3fh
fixed_packages
0
url pkg:composer/maikuolan/phpmussel@1.6.0
purl pkg:composer/maikuolan/phpmussel@1.6.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/maikuolan/phpmussel@1.6.0
aliases CVE-2020-4043, GHSA-qr95-4mq5-r3fh
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nqwf-t1an-27e9
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/maikuolan/phpmussel@1.4.0