Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/symfony/symfony@2.7.33
Typecomposer
Namespacesymfony
Namesymfony
Version2.7.33
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.7.49
Latest_non_vulnerable_version8.0.5
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-3qct-gbgt-kkbb
vulnerability_id VCID-3qct-gbgt-kkbb
summary 
Cross-site Scripting
The debug handler in Symfony has an XSS via an array key during exception pretty printing in `ExceptionHandler.php`, as demonstrated by a `/_debugbar/open?op`=get` URI.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-18343
reference_id CVE-2017-18343
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-18343
fixed_packages
0
url pkg:composer/symfony/symfony@2.7.33
purl pkg:composer/symfony/symfony@2.7.33
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.7.33
1
url pkg:composer/symfony/symfony@2.8.26
purl pkg:composer/symfony/symfony@2.8.26
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.8.26
2
url pkg:composer/symfony/symfony@3.2.13
purl pkg:composer/symfony/symfony@3.2.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-djnm-e9r4-c3f5
1
vulnerability VCID-dsbx-q641-4fc7
2
vulnerability VCID-xdtu-22ad-63aq
3
vulnerability VCID-xj13-fspe-hfgv
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.2.13
3
url pkg:composer/symfony/symfony@3.3.6
purl pkg:composer/symfony/symfony@3.3.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@3.3.6
aliases CVE-2017-18343
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3qct-gbgt-kkbb
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/symfony/symfony@2.7.33