Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.santuario/xmlsec@2.3.0
Typemaven
Namespaceorg.apache.santuario
Namexmlsec
Version2.3.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.3.4
Latest_non_vulnerable_version3.0.3
Affected_by_vulnerabilities
0
url VCID-vhn6-32bh-xuc6
vulnerability_id VCID-vhn6-32bh-xuc6
summary 
Apache Santuario - XML Security for Java are vulnerable to private key disclosure
All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when generating an XML Signature and logging with debug level is enabled. Users are recommended to upgrade to version 2.2.6, 2.3.4, or 3.0.3, which fixes this issue.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-44483.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-44483.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-44483
reference_id
reference_type
scores
0
value 0.0019
scoring_system epss
scoring_elements 0.40684
published_at 2026-04-24T12:55:00Z
1
value 0.0019
scoring_system epss
scoring_elements 0.40872
published_at 2026-04-02T12:55:00Z
2
value 0.0019
scoring_system epss
scoring_elements 0.40899
published_at 2026-04-04T12:55:00Z
3
value 0.0019
scoring_system epss
scoring_elements 0.40826
published_at 2026-04-07T12:55:00Z
4
value 0.0019
scoring_system epss
scoring_elements 0.40875
published_at 2026-04-08T12:55:00Z
5
value 0.0019
scoring_system epss
scoring_elements 0.40882
published_at 2026-04-09T12:55:00Z
6
value 0.0019
scoring_system epss
scoring_elements 0.40898
published_at 2026-04-11T12:55:00Z
7
value 0.0019
scoring_system epss
scoring_elements 0.40863
published_at 2026-04-12T12:55:00Z
8
value 0.0019
scoring_system epss
scoring_elements 0.40844
published_at 2026-04-13T12:55:00Z
9
value 0.0019
scoring_system epss
scoring_elements 0.40888
published_at 2026-04-16T12:55:00Z
10
value 0.0019
scoring_system epss
scoring_elements 0.40858
published_at 2026-04-18T12:55:00Z
11
value 0.0019
scoring_system epss
scoring_elements 0.40779
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-44483
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44483
3
reference_url https://github.com/apache/santuario-java
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/santuario-java
4
reference_url https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-12T14:33:15Z/
url https://lists.apache.org/thread/vmqbp9mfxtrf0kmbnnmbn3h9j6dr9q55
5
reference_url https://security.netapp.com/advisory/ntap-20241108-0002
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20241108-0002
6
reference_url http://www.openwall.com/lists/oss-security/2023/10/20/5
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-12T14:33:15Z/
url http://www.openwall.com/lists/oss-security/2023/10/20/5
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059313
reference_id 1059313
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059313
8
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2246070
reference_id 2246070
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2246070
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-44483
reference_id CVE-2023-44483
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-44483
10
reference_url https://santuario.apache.org/secadv.data/CVE-2023-44483.txt.asc?version=1&modificationDate=1697782758000&api=v2
reference_id CVE-2023-44483.TXT.ASC?VERSION=1&MODIFICATIONDATE=1697782758000&API=V2
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://santuario.apache.org/secadv.data/CVE-2023-44483.txt.asc?version=1&modificationDate=1697782758000&api=v2
11
reference_url https://github.com/advisories/GHSA-xfrj-6vvc-3xm2
reference_id GHSA-xfrj-6vvc-3xm2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xfrj-6vvc-3xm2
12
reference_url https://access.redhat.com/errata/RHSA-2024:0710
reference_id RHSA-2024:0710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0710
13
reference_url https://access.redhat.com/errata/RHSA-2024:0711
reference_id RHSA-2024:0711
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0711
14
reference_url https://access.redhat.com/errata/RHSA-2024:0712
reference_id RHSA-2024:0712
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0712
15
reference_url https://access.redhat.com/errata/RHSA-2024:0714
reference_id RHSA-2024:0714
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0714
16
reference_url https://access.redhat.com/errata/RHSA-2024:0789
reference_id RHSA-2024:0789
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:0789
17
reference_url https://access.redhat.com/errata/RHSA-2024:3708
reference_id RHSA-2024:3708
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:3708
fixed_packages
0
url pkg:maven/org.apache.santuario/xmlsec@2.3.4
purl pkg:maven/org.apache.santuario/xmlsec@2.3.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@2.3.4
1
url pkg:maven/org.apache.santuario/xmlsec@3.0.3
purl pkg:maven/org.apache.santuario/xmlsec@3.0.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@3.0.3
aliases CVE-2023-44483, GHSA-xfrj-6vvc-3xm2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vhn6-32bh-xuc6
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.santuario/xmlsec@2.3.0