Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/django@1.1.0
Typepypi
Namespace
Namedjango
Version1.1.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1.7b4
Latest_non_vulnerable_version6.0.5
Affected_by_vulnerabilities
0
url VCID-kuyz-3pxs-r7cv
vulnerability_id VCID-kuyz-3pxs-r7cv
summary Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via forged AJAX requests that leverage a "combination of browser plugins and redirects," a related issue to CVE-2011-0447.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
2
reference_url http://openwall.com/lists/oss-security/2011/02/09/6
reference_id
reference_type
scores
url http://openwall.com/lists/oss-security/2011/02/09/6
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=676357
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=676357
4
reference_url http://secunia.com/advisories/43230
reference_id
reference_type
scores
url http://secunia.com/advisories/43230
5
reference_url http://secunia.com/advisories/43297
reference_id
reference_type
scores
url http://secunia.com/advisories/43297
6
reference_url http://secunia.com/advisories/43382
reference_id
reference_type
scores
url http://secunia.com/advisories/43382
7
reference_url http://secunia.com/advisories/43426
reference_id
reference_type
scores
url http://secunia.com/advisories/43426
8
reference_url https://github.com/advisories/GHSA-5j2h-h5hg-3wf8
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-5j2h-h5hg-3wf8
9
reference_url https://github.com/django/django/commit/408c5c873ce1437c7eee9544ff279ecbad7e150a
reference_id
reference_type
scores
url https://github.com/django/django/commit/408c5c873ce1437c7eee9544ff279ecbad7e150a
10
reference_url https://github.com/django/django/commit/818e70344e7193f6ebc73c82ed574e6ce3c91afc
reference_id
reference_type
scores
url https://github.com/django/django/commit/818e70344e7193f6ebc73c82ed574e6ce3c91afc
11
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-10.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-10.yaml
12
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-30.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-30.yaml
13
reference_url http://www.debian.org/security/2011/dsa-2163
reference_id
reference_type
scores
url http://www.debian.org/security/2011/dsa-2163
14
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security/
reference_id
reference_type
scores
url http://www.djangoproject.com/weblog/2011/feb/08/security/
15
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
16
reference_url http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/46296
17
reference_url http://www.ubuntu.com/usn/USN-1066-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-1066-1
18
reference_url http://www.vupen.com/english/advisories/2011/0372
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0372
19
reference_url http://www.vupen.com/english/advisories/2011/0388
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0388
20
reference_url http://www.vupen.com/english/advisories/2011/0429
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0429
21
reference_url http://www.vupen.com/english/advisories/2011/0439
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0439
22
reference_url http://www.vupen.com/english/advisories/2011/0441
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0441
23
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0696
reference_id CVE-2011-0696
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-0696
fixed_packages
0
url pkg:pypi/django@1.1.4
purl pkg:pypi/django@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38e1-hepp-vkg9
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-5brz-383w-pfbb
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-66ax-8wdn-1bgb
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-7g7m-bfe1-wkhd
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bsf-vm3b-ubhw
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-dh12-js4b-h7fw
16
vulnerability VCID-ffsr-th58-p3ct
17
vulnerability VCID-jfya-694v-myar
18
vulnerability VCID-ksh8-pazn-dbca
19
vulnerability VCID-mccp-khb9-qkb7
20
vulnerability VCID-r7tk-79xy-jkhj
21
vulnerability VCID-rq19-9v21-47dy
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u5u9-xbb6-93hc
26
vulnerability VCID-u6sd-648r-qbdb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-vj5u-2ukv-audq
29
vulnerability VCID-weqb-fxu4-17e7
30
vulnerability VCID-xf2n-qua7-m7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.4
1
url pkg:pypi/django@1.2.5
purl pkg:pypi/django@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38e1-hepp-vkg9
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-5brz-383w-pfbb
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-66ax-8wdn-1bgb
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-7g7m-bfe1-wkhd
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bsf-vm3b-ubhw
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-dh12-js4b-h7fw
16
vulnerability VCID-ffsr-th58-p3ct
17
vulnerability VCID-jfya-694v-myar
18
vulnerability VCID-ksh8-pazn-dbca
19
vulnerability VCID-mccp-khb9-qkb7
20
vulnerability VCID-r7tk-79xy-jkhj
21
vulnerability VCID-rq19-9v21-47dy
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u5u9-xbb6-93hc
26
vulnerability VCID-u6sd-648r-qbdb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-vj5u-2ukv-audq
29
vulnerability VCID-weqb-fxu4-17e7
30
vulnerability VCID-xf2n-qua7-m7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5
aliases CVE-2011-0696, GHSA-5j2h-h5hg-3wf8, PYSEC-2011-10, PYSEC-2011-30
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kuyz-3pxs-r7cv
1
url VCID-n6ps-f6s6-zkbj
vulnerability_id VCID-n6ps-f6s6-zkbj
summary Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file upload.
references
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054207.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
reference_id
reference_type
scores
url http://lists.fedoraproject.org/pipermail/package-announce/2011-February/054208.html
2
reference_url http://openwall.com/lists/oss-security/2011/02/09/6
reference_id
reference_type
scores
url http://openwall.com/lists/oss-security/2011/02/09/6
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=676359
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=676359
4
reference_url http://secunia.com/advisories/43230
reference_id
reference_type
scores
url http://secunia.com/advisories/43230
5
reference_url http://secunia.com/advisories/43297
reference_id
reference_type
scores
url http://secunia.com/advisories/43297
6
reference_url http://secunia.com/advisories/43382
reference_id
reference_type
scores
url http://secunia.com/advisories/43382
7
reference_url http://secunia.com/advisories/43426
reference_id
reference_type
scores
url http://secunia.com/advisories/43426
8
reference_url https://github.com/advisories/GHSA-8m3r-rv5g-fcpq
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-8m3r-rv5g-fcpq
9
reference_url https://github.com/django/django/commit/1966786d2dde73e17f39cf340eb33fcb5d73904e
reference_id
reference_type
scores
url https://github.com/django/django/commit/1966786d2dde73e17f39cf340eb33fcb5d73904e
10
reference_url https://github.com/django/django/commit/1f814a9547842dcfabdae09573055984af9d3fab
reference_id
reference_type
scores
url https://github.com/django/django/commit/1f814a9547842dcfabdae09573055984af9d3fab
11
reference_url https://github.com/django/django/commit/90be6ca20d607977dec234ec972b77b83955749b
reference_id
reference_type
scores
url https://github.com/django/django/commit/90be6ca20d607977dec234ec972b77b83955749b
12
reference_url https://github.com/django/django/commit/a9cf3d23724ff6918103e86aa863eadd1fab811d
reference_id
reference_type
scores
url https://github.com/django/django/commit/a9cf3d23724ff6918103e86aa863eadd1fab811d
13
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-11.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-11.yaml
14
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-31.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2011-31.yaml
15
reference_url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
reference_id
reference_type
scores
url https://web.archive.org/web/20110521033259/http://secunia.com/advisories/43230
16
reference_url https://web.archive.org/web/20110521033304/http://secunia.com/advisories/43297
reference_id
reference_type
scores
url https://web.archive.org/web/20110521033304/http://secunia.com/advisories/43297
17
reference_url https://web.archive.org/web/20110521033309/http://secunia.com/advisories/43382
reference_id
reference_type
scores
url https://web.archive.org/web/20110521033309/http://secunia.com/advisories/43382
18
reference_url https://web.archive.org/web/20110521033314/http://secunia.com/advisories/43426
reference_id
reference_type
scores
url https://web.archive.org/web/20110521033314/http://secunia.com/advisories/43426
19
reference_url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
url https://web.archive.org/web/20130616104703/http://www.securityfocus.com/bid/46296
20
reference_url http://www.debian.org/security/2011/dsa-2163
reference_id
reference_type
scores
url http://www.debian.org/security/2011/dsa-2163
21
reference_url http://www.djangoproject.com/weblog/2011/feb/08/security/
reference_id
reference_type
scores
url http://www.djangoproject.com/weblog/2011/feb/08/security/
22
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDVSA-2011:031
23
reference_url http://www.securityfocus.com/bid/46296
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/46296
24
reference_url http://www.ubuntu.com/usn/USN-1066-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/USN-1066-1
25
reference_url http://www.vupen.com/english/advisories/2011/0372
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0372
26
reference_url http://www.vupen.com/english/advisories/2011/0388
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0388
27
reference_url http://www.vupen.com/english/advisories/2011/0429
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0429
28
reference_url http://www.vupen.com/english/advisories/2011/0439
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0439
29
reference_url http://www.vupen.com/english/advisories/2011/0441
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2011/0441
30
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0697
reference_id CVE-2011-0697
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-0697
fixed_packages
0
url pkg:pypi/django@1.1.4
purl pkg:pypi/django@1.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38e1-hepp-vkg9
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-5brz-383w-pfbb
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-66ax-8wdn-1bgb
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-7g7m-bfe1-wkhd
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bsf-vm3b-ubhw
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-dh12-js4b-h7fw
16
vulnerability VCID-ffsr-th58-p3ct
17
vulnerability VCID-jfya-694v-myar
18
vulnerability VCID-ksh8-pazn-dbca
19
vulnerability VCID-mccp-khb9-qkb7
20
vulnerability VCID-r7tk-79xy-jkhj
21
vulnerability VCID-rq19-9v21-47dy
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u5u9-xbb6-93hc
26
vulnerability VCID-u6sd-648r-qbdb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-vj5u-2ukv-audq
29
vulnerability VCID-weqb-fxu4-17e7
30
vulnerability VCID-xf2n-qua7-m7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.4
1
url pkg:pypi/django@1.2.5
purl pkg:pypi/django@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-38e1-hepp-vkg9
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-5brz-383w-pfbb
4
vulnerability VCID-5vmb-d4xp-zfgy
5
vulnerability VCID-66ax-8wdn-1bgb
6
vulnerability VCID-6wah-r8vr-5qc4
7
vulnerability VCID-7g7m-bfe1-wkhd
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9bsf-vm3b-ubhw
13
vulnerability VCID-9mpt-zxaw-kkeg
14
vulnerability VCID-bahz-gfxv-e3b2
15
vulnerability VCID-dh12-js4b-h7fw
16
vulnerability VCID-ffsr-th58-p3ct
17
vulnerability VCID-jfya-694v-myar
18
vulnerability VCID-ksh8-pazn-dbca
19
vulnerability VCID-mccp-khb9-qkb7
20
vulnerability VCID-r7tk-79xy-jkhj
21
vulnerability VCID-rq19-9v21-47dy
22
vulnerability VCID-rxxr-sseq-k7a9
23
vulnerability VCID-ta66-7qrm-sbhu
24
vulnerability VCID-u4a7-uvcb-9kf8
25
vulnerability VCID-u5u9-xbb6-93hc
26
vulnerability VCID-u6sd-648r-qbdb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-vj5u-2ukv-audq
29
vulnerability VCID-weqb-fxu4-17e7
30
vulnerability VCID-xf2n-qua7-m7fb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.2.5
aliases CVE-2011-0697, GHSA-8m3r-rv5g-fcpq, PYSEC-2011-11, PYSEC-2011-31
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-n6ps-f6s6-zkbj
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/django@1.1.0