Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.xmlgraphics/fop@2.2
Typemaven
Namespaceorg.apache.xmlgraphics
Namefop
Version2.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.2
Latest_non_vulnerable_version2.2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-kajp-2uv9-tke5
vulnerability_id VCID-kajp-2uv9-tke5
summary 
Denial of Service with XXE
Files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciously formed SVG files. The file types that can be shown depend on the user context in which the exploitable application is running. If the user is root a full compromise of the server - including confidential or sensitive files - would be possible. XXE can also be used to attack the availability of the server via denial of service as the references within a xml document can trivially trigger an amplification attack.
references
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5661
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5661
1
reference_url https://vuldb.com/?id.99936
reference_id
reference_type
scores
url https://vuldb.com/?id.99936
2
reference_url https://xmlgraphics.apache.org/security.html
reference_id
reference_type
scores
url https://xmlgraphics.apache.org/security.html
3
reference_url https://access.redhat.com/security/cve/cve-2017-5661
reference_id CVE-2017-5661
reference_type
scores
url https://access.redhat.com/security/cve/cve-2017-5661
fixed_packages
0
url pkg:maven/org.apache.xmlgraphics/fop@2.2
purl pkg:maven/org.apache.xmlgraphics/fop@2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.xmlgraphics/fop@2.2
aliases CVE-2017-5661
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kajp-2uv9-tke5
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.xmlgraphics/fop@2.2