Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/62331?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/62331?format=api", "purl": "pkg:composer/moodle/moodle@2.2.6", "type": "composer", "namespace": "moodle", "name": "moodle", "version": "2.2.6", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2.2.7", "latest_non_vulnerable_version": "5.1.2", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43610?format=api", "vulnerability_id": "VCID-1uce-2wtr-8bfg", "summary": "Improper Input Validation\nThe moodle1 backup converter in backup/converter/moodle1/lib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 does not properly validate pathnames, which allows remote authenticated users to read arbitrary files by leveraging the backup-restoration feature.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36977", "reference_id": "", "reference_type": "", "scores": [], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36977" }, { "reference_url": "http://openwall.com/lists/oss-security/2013/01/21/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://openwall.com/lists/oss-security/2013/01/21/1" }, { "reference_url": "https://github.com/moodle/moodle/commit/0ab681d3e7bed2a37430387f9da8504c0b077d10", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/0ab681d3e7bed2a37430387f9da8504c0b077d10" }, { "reference_url": "https://github.com/moodle/moodle/commit/7b66137f7bcc84fb5eb07f58fb658b21bf37cc44", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/7b66137f7bcc84fb5eb07f58fb658b21bf37cc44" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=220160", "reference_id": "", "reference_type": "", "scores": [], "url": "https://moodle.org/mod/forum/discuss.php?d=220160" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6099", "reference_id": "CVE-2012-6099", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-6099" }, { "reference_url": "https://github.com/advisories/GHSA-cr78-rphw-w73p", "reference_id": "GHSA-cr78-rphw-w73p", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-cr78-rphw-w73p" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62479?format=api", "purl": "pkg:composer/moodle/moodle@2.2.7", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.2.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/62480?format=api", "purl": "pkg:composer/moodle/moodle@2.3.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/62481?format=api", "purl": "pkg:composer/moodle/moodle@2.4.1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.4.1" } ], "aliases": [ "CVE-2012-6099", "GHSA-cr78-rphw-w73p" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1uce-2wtr-8bfg" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43468?format=api", "vulnerability_id": "VCID-et8t-f1u1-kudb", "summary": "Moodle Allows Unauthenticated Dropbox Access\nThe Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout.", "references": [ { "reference_url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29872", "reference_id": "", "reference_type": "", "scores": [], "url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-29872" }, { "reference_url": "http://openwall.com/lists/oss-security/2012/11/19/1", "reference_id": "", "reference_type": "", "scores": [], "url": "http://openwall.com/lists/oss-security/2012/11/19/1" }, { "reference_url": "https://github.com/moodle/moodle/commit/8eb614d4bb4a80ed51520bca528530914082136f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/8eb614d4bb4a80ed51520bca528530914082136f" }, { "reference_url": "https://github.com/moodle/moodle/commit/a3433213a1a2346c145e004ab1dc08b58279f910", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/a3433213a1a2346c145e004ab1dc08b58279f910" }, { "reference_url": "https://github.com/moodle/moodle/commit/c62a20c42b96f0195c4de075e5c58a4e7d381428", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/c62a20c42b96f0195c4de075e5c58a4e7d381428" }, { "reference_url": "https://github.com/moodle/moodle/commit/cd029574b699c74e55fa287f0b4db45d2dcf9fde", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/moodle/moodle/commit/cd029574b699c74e55fa287f0b4db45d2dcf9fde" }, { "reference_url": "https://moodle.org/mod/forum/discuss.php?d=216155", "reference_id": "", "reference_type": "", "scores": [], "url": "https://moodle.org/mod/forum/discuss.php?d=216155" }, { "reference_url": "https://web.archive.org/web/20121202030020/http://www.securityfocus.com/bid/56505", "reference_id": "", "reference_type": "", "scores": [], "url": "https://web.archive.org/web/20121202030020/http://www.securityfocus.com/bid/56505" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5471", "reference_id": "CVE-2012-5471", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-5471" }, { "reference_url": "https://github.com/advisories/GHSA-mpjx-8phj-5m34", "reference_id": "GHSA-mpjx-8phj-5m34", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-mpjx-8phj-5m34" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/62333?format=api", "purl": "pkg:composer/moodle/moodle@2.1.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1uce-2wtr-8bfg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.1.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/62331?format=api", "purl": "pkg:composer/moodle/moodle@2.2.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1uce-2wtr-8bfg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.2.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/62332?format=api", "purl": "pkg:composer/moodle/moodle@2.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1uce-2wtr-8bfg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.3.3" } ], "aliases": [ "CVE-2012-5471", "GHSA-mpjx-8phj-5m34" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-et8t-f1u1-kudb" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/moodle/moodle@2.2.6" }