Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/concrete5/concrete5@5.6.4%2B0
Typecomposer
Namespaceconcrete5
Nameconcrete5
Version5.6.4+0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.7.4
Latest_non_vulnerable_version9.4.8
Affected_by_vulnerabilities
0
url VCID-6rd5-q9wc-b7cx
vulnerability_id VCID-6rd5-q9wc-b7cx
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in in concrete5-legacy allows remote attackers to inject arbitrary web script or HTML via the cID parameter.
references
0
reference_url https://github.com/concrete5/concrete5-legacy/issues/2006
reference_id
reference_type
scores
url https://github.com/concrete5/concrete5-legacy/issues/2006
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41463
reference_id CVE-2021-41463
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41463
fixed_packages
0
url pkg:composer/concrete5/concrete5@8.0.0
purl pkg:composer/concrete5/concrete5@8.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@8.0.0
aliases CVE-2021-41463
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6rd5-q9wc-b7cx
1
url VCID-85xc-mpns-v3d7
vulnerability_id VCID-85xc-mpns-v3d7
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy allows remote attackers to inject arbitrary web script or HTML via the ctID parameter.
references
0
reference_url https://github.com/concrete5/concrete5-legacy/issues/2006
reference_id
reference_type
scores
url https://github.com/concrete5/concrete5-legacy/issues/2006
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41462
reference_id CVE-2021-41462
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41462
fixed_packages
0
url pkg:composer/concrete5/concrete5@8.0.0
purl pkg:composer/concrete5/concrete5@8.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@8.0.0
aliases CVE-2021-41462
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-85xc-mpns-v3d7
2
url VCID-pj3v-b8ra-rkc4
vulnerability_id VCID-pj3v-b8ra-rkc4
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy allows remote attackers to inject arbitrary web script or HTML via the mode parameter.
references
0
reference_url https://github.com/concrete5/concrete5-legacy/issues/2006
reference_id
reference_type
scores
url https://github.com/concrete5/concrete5-legacy/issues/2006
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41461
reference_id CVE-2021-41461
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41461
fixed_packages
0
url pkg:composer/concrete5/concrete5@8.0.0
purl pkg:composer/concrete5/concrete5@8.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@8.0.0
aliases CVE-2021-41461
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pj3v-b8ra-rkc4
3
url VCID-tdne-zktd-3kbs
vulnerability_id VCID-tdne-zktd-3kbs
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy allows remote attackers to inject arbitrary web script or HTML via the rel parameter.
references
0
reference_url https://github.com/concrete5/concrete5-legacy/issues/2006
reference_id
reference_type
scores
url https://github.com/concrete5/concrete5-legacy/issues/2006
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41465
reference_id CVE-2021-41465
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41465
fixed_packages
0
url pkg:composer/concrete5/concrete5@8.0.0
purl pkg:composer/concrete5/concrete5@8.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@8.0.0
aliases CVE-2021-41465
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tdne-zktd-3kbs
4
url VCID-xd9v-yusj-qkcx
vulnerability_id VCID-xd9v-yusj-qkcx
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy allows remote attackers to inject arbitrary web script or HTML via the rel parameter.
references
0
reference_url https://github.com/concrete5/concrete5-legacy/issues/2006
reference_id
reference_type
scores
url https://github.com/concrete5/concrete5-legacy/issues/2006
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-41464
reference_id CVE-2021-41464
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2021-41464
fixed_packages
0
url pkg:composer/concrete5/concrete5@8.0.0
purl pkg:composer/concrete5/concrete5@8.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@8.0.0
aliases CVE-2021-41464
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xd9v-yusj-qkcx
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/concrete5/concrete5@5.6.4%252B0