Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.wso2.carbon.registry/registry@4.6.35
Typemaven
Namespaceorg.wso2.carbon.registry
Nameregistry
Version4.6.35
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.8.12
Latest_non_vulnerable_version4.8.12
Affected_by_vulnerabilities
0
url VCID-3zv4-731z-d7d4
vulnerability_id VCID-3zv4-731z-d7d4
summary A vulnerability was found in WSO2 carbon-registry up to 4.8.11. It has been rated as problematic. Affected by this issue is some unknown functionality of the file components/registry/org.wso2.carbon.registry.search.ui/src/main/resources/web/search/advancedSearchForm-ajaxprocessor.jsp of the component Advanced Search. The manipulation of the argument mediaType/rightOp/leftOp/rightPropertyValue/leftPropertyValue leads to cross site scripting. The attack may be launched remotely. Upgrading to version 4.8.12 is able to address this issue. The name of the patch is 0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-215900.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4520
reference_id
reference_type
scores
0
value 0.00339
scoring_system epss
scoring_elements 0.57164
published_at 2026-06-14T12:55:00Z
1
value 0.00339
scoring_system epss
scoring_elements 0.57171
published_at 2026-06-13T12:55:00Z
2
value 0.00339
scoring_system epss
scoring_elements 0.57158
published_at 2026-06-12T12:55:00Z
3
value 0.00339
scoring_system epss
scoring_elements 0.57038
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4520
1
reference_url https://github.com/wso2/carbon-registry
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wso2/carbon-registry
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4520
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4520
3
reference_url https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4
reference_id 0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:54:59Z/
url https://github.com/wso2/carbon-registry/commit/0c827cc1b14b82d8eb86117ab2e43c34bb91ddb4
4
reference_url https://github.com/wso2/carbon-registry/pull/404
reference_id 404
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:54:59Z/
url https://github.com/wso2/carbon-registry/pull/404
5
reference_url https://github.com/advisories/GHSA-j34r-57xj-pfm5
reference_id GHSA-j34r-57xj-pfm5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j34r-57xj-pfm5
6
reference_url https://vuldb.com/?id.215900
reference_id ?id.215900
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:54:59Z/
url https://vuldb.com/?id.215900
7
reference_url https://github.com/wso2/carbon-registry/releases/tag/v4.8.12
reference_id v4.8.12
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T16:54:59Z/
url https://github.com/wso2/carbon-registry/releases/tag/v4.8.12
fixed_packages
0
url pkg:maven/org.wso2.carbon.registry/registry@4.8.12
purl pkg:maven/org.wso2.carbon.registry/registry@4.8.12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.wso2.carbon.registry/registry@4.8.12
aliases CVE-2022-4520, GHSA-j34r-57xj-pfm5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3zv4-731z-d7d4
1
url VCID-b1r5-qqfy-d7b8
vulnerability_id VCID-b1r5-qqfy-d7b8
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-4521
reference_id
reference_type
scores
0
value 0.00289
scoring_system epss
scoring_elements 0.52667
published_at 2026-06-11T12:55:00Z
1
value 0.00289
scoring_system epss
scoring_elements 0.52796
published_at 2026-06-12T12:55:00Z
2
value 0.00289
scoring_system epss
scoring_elements 0.5281
published_at 2026-06-13T12:55:00Z
3
value 0.00289
scoring_system epss
scoring_elements 0.52793
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-4521
1
reference_url https://github.com/wso2/carbon-registry
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wso2/carbon-registry
2
reference_url https://github.com/wso2/carbon-registry/commit/9f967abfde9317bee2cda469dbc09b57d539f2cc
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wso2/carbon-registry/commit/9f967abfde9317bee2cda469dbc09b57d539f2cc
3
reference_url https://github.com/wso2/carbon-registry/pull/399
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wso2/carbon-registry/pull/399
4
reference_url https://github.com/wso2/carbon-registry/releases/tag/v4.8.7
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/wso2/carbon-registry/releases/tag/v4.8.7
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-4521
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-4521
6
reference_url https://vuldb.com/?id.215901
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://vuldb.com/?id.215901
7
reference_url https://github.com/advisories/GHSA-gp5f-gqgq-7254
reference_id GHSA-gp5f-gqgq-7254
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gp5f-gqgq-7254
fixed_packages
0
url pkg:maven/org.wso2.carbon.registry/registry@4.8.7
purl pkg:maven/org.wso2.carbon.registry/registry@4.8.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3zv4-731z-d7d4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.wso2.carbon.registry/registry@4.8.7
aliases CVE-2022-4521, GHSA-gp5f-gqgq-7254
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b1r5-qqfy-d7b8
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.wso2.carbon.registry/registry@4.6.35