Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/mautic/core@2.0.0
Typecomposer
Namespacemautic
Namecore
Version2.0.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.7.0
Latest_non_vulnerable_version7.0.1
Affected_by_vulnerabilities
0
url VCID-7nmh-nhm6-abhr
vulnerability_id VCID-7nmh-nhm6-abhr
summary 
Information Exposure
An issue was discovered in Mautic It is possible to systematically emulate tracking cookies per contact due to tracking the contact by their auto-incremented ID. Thus, a third party can manipulate the cookie value with +1 to systematically assume being tracked as each contact in Mautic. It is then possible to retrieve information about the contact through forms that have progressive profiling enabled.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-10189
reference_id CVE-2018-10189
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-10189
fixed_packages
0
url pkg:composer/mautic/core@2.13.0
purl pkg:composer/mautic/core@2.13.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/mautic/core@2.13.0
aliases CVE-2018-10189
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7nmh-nhm6-abhr
Fixing_vulnerabilities
0
url VCID-534f-awjj-kqh9
vulnerability_id VCID-534f-awjj-kqh9
summary 
Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery vulnerabilies exist in Matic.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-8874
reference_id CVE-2017-8874
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-8874
fixed_packages
0
url pkg:composer/mautic/core@2.0.0
purl pkg:composer/mautic/core@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7nmh-nhm6-abhr
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/mautic/core@2.0.0
aliases CVE-2017-8874
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-534f-awjj-kqh9
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/mautic/core@2.0.0