Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:composer/drupal/core@9.2.13

Type composer

Namespace drupal

Name core

Version 9.2.13

Qualifiers

Subpath

Is_vulnerable false

Next_non_vulnerable_version 9.2.16

Latest_non_vulnerable_version 11.2.8

Affected_by_vulnerabilities

Fixing_vulnerabilities

url VCID-2g67-a42m-qfbh

vulnerability_id VCID-2g67-a42m-qfbh

summary

Improper Input Validation
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter critical or sensitive data.

references

reference_url	https://www.drupal.org/sa-core-2022-003
reference_id
reference_type
scores
url	https://www.drupal.org/sa-core-2022-003

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2022-25271
reference_id	CVE-2022-25271
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2022-25271

fixed_packages

url pkg:composer/drupal/core@8.0.0

purl pkg:composer/drupal/core@8.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2989-fmjz-nkby

vulnerability	VCID-2fas-m6vh-myhc

vulnerability	VCID-2t34-82p3-73c3

vulnerability	VCID-31qy-vagp-83b6

vulnerability	VCID-3xk4-qwaq-5yaj

vulnerability	VCID-4dpp-gg2v-q3et

vulnerability	VCID-56ze-2yw2-bfh8

vulnerability	VCID-5c5c-m7ba-kqct

vulnerability	VCID-7v89-2sss-hfaz

vulnerability	VCID-9nk8-dban-g7h9

vulnerability	VCID-a3s2-c4k2-4ufn

vulnerability	VCID-a4u4-ga84-wyf9

vulnerability	VCID-a7ss-tkb6-gkge

vulnerability	VCID-ah3h-t9qa-gudr

vulnerability	VCID-ard5-3cjv-1beu

vulnerability	VCID-asm8-guag-b3ep

vulnerability	VCID-avmn-kqky-83dd

vulnerability	VCID-ay6b-1a7z-qkas

vulnerability	VCID-bq2j-t19h-zyad

vulnerability	VCID-dav9-pgdh-8yey

vulnerability	VCID-dyhz-g3nv-yuc3

vulnerability	VCID-e12q-qavs-qybu

vulnerability	VCID-e8un-nbkk-cbf9

vulnerability	VCID-egtv-y9w1-skgr

vulnerability	VCID-jrhg-3271-tqdy

vulnerability	VCID-kzrs-mrga-nyej

vulnerability	VCID-mm13-6dhq-nqfb

vulnerability	VCID-myja-t33q-q3cv

vulnerability	VCID-nacy-y1qt-5yhb

vulnerability	VCID-ng6g-hvc2-bkg4

vulnerability	VCID-p54u-b18k-jyft

vulnerability	VCID-pgnc-fq4m-3kaz

vulnerability	VCID-pmmq-8s2m-h7dp

vulnerability	VCID-pnme-dc73-efcb

vulnerability	VCID-qsuc-53pg-zkda

vulnerability	VCID-rd4g-h1j9-23cb

vulnerability	VCID-rsc6-y1uv-6bfq

vulnerability	VCID-t89y-c9hq-9bhk

vulnerability	VCID-ta99-gcmk-2qc8

vulnerability	VCID-tpzm-u3qp-akc8

vulnerability	VCID-w4ks-ufnz-vfav

vulnerability	VCID-wapd-e3mu-sffn

vulnerability	VCID-wsv7-je8g-sqet

vulnerability	VCID-wszp-2es5-z7fy

vulnerability	VCID-x34m-u169-1bce

vulnerability	VCID-y1nb-prqc-suaj

vulnerability	VCID-yq4q-hydz-vuga

vulnerability	VCID-yygb-pp11-5udj

vulnerability	VCID-zqer-y4s4-hqhy

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.0

url	pkg:composer/drupal/core@9.2.13
purl	pkg:composer/drupal/core@9.2.13
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.13

url pkg:composer/drupal/core@9.3.6

purl pkg:composer/drupal/core@9.3.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r1hd-d39y-syhj

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.6

aliases CVE-2022-25271

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2g67-a42m-qfbh

url VCID-ydy1-x277-1fhj

vulnerability_id VCID-ydy1-x277-1fhj

summary

Incorrect Authorization
The Quick Edit module does not properly check entity access in some circumstances. This could result in users with the "access in-place editing" permission viewing some content they are are not authorized to access. Sites are only affected if the QuickEdit module (which comes with the Standard profile) is installed.

references

reference_url	https://www.drupal.org/sa-core-2022-004
reference_id
reference_type
scores
url	https://www.drupal.org/sa-core-2022-004

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2022-25270
reference_id	CVE-2022-25270
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2022-25270

fixed_packages

url	pkg:composer/drupal/core@9.2.13
purl	pkg:composer/drupal/core@9.2.13
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.13

url pkg:composer/drupal/core@9.3.6

purl pkg:composer/drupal/core@9.3.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r1hd-d39y-syhj

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.3.6

aliases CVE-2022-25270

risk_score null

exploitability null

weighted_severity null

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ydy1-x277-1fhj

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@9.2.13

Package Instance