Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
Typemaven
Namespaceorg.apache.jspwiki
Namejspwiki-main
Version2.11.0.M5
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version2.11.0
Latest_non_vulnerable_version2.12.3
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-hu3x-x6ze-8ya7
vulnerability_id VCID-hu3x-x6ze-8ya7
summary Carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the plain editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10090
reference_id
reference_type
scores
0
value 0.04374
scoring_system epss
scoring_elements 0.89154
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10090
1
reference_url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10090
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10090
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10090
reference_id CVE-2019-10090
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10090
fixed_packages
0
url pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
purl pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
aliases CVE-2019-10090, GHSA-g6ww-2x43-h963
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hu3x-x6ze-8ya7
1
url VCID-ng2g-et6p-nfgh
vulnerability_id VCID-ng2g-et6p-nfgh
summary Carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to `InfoContent.jsp`, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12404
reference_id
reference_type
scores
0
value 0.04421
scoring_system epss
scoring_elements 0.89213
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12404
1
reference_url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12404
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12404
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12404
reference_id CVE-2019-12404
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12404
fixed_packages
0
url pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
purl pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
aliases CVE-2019-12404, GHSA-7qmg-qg53-mrp8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ng2g-et6p-nfgh
2
url VCID-u3f1-j3gz-m7cf
vulnerability_id VCID-u3f1-j3gz-m7cf
summary 
Cross-site Scripting
On Apache JSPWiki, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the Page Revision History, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10087
reference_id
reference_type
scores
0
value 0.04421
scoring_system epss
scoring_elements 0.89213
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10087
1
reference_url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10087
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10087
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10087
reference_id CVE-2019-10087
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10087
fixed_packages
0
url pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
purl pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
aliases CVE-2019-10087, GHSA-gwfq-qwmp-x9xg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u3f1-j3gz-m7cf
3
url VCID-y2nn-5x4r-pygx
vulnerability_id VCID-y2nn-5x4r-pygx
summary Carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the WYSIWYG editor, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10089
reference_id
reference_type
scores
0
value 0.04374
scoring_system epss
scoring_elements 0.89154
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10089
1
reference_url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10089
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-10089
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10089
reference_id CVE-2019-10089
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10089
fixed_packages
0
url pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
purl pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
aliases CVE-2019-10089, GHSA-3rx2-x6mx-grj3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y2nn-5x4r-pygx
4
url VCID-y618-1jjp-b7gz
vulnerability_id VCID-y618-1jjp-b7gz
summary 
Cross-site Scripting
On Apache JSPWiki, a carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, related to the remember parameter on some of the JSPs, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-12407
reference_id
reference_type
scores
0
value 0.04421
scoring_system epss
scoring_elements 0.89213
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-12407
1
reference_url https://github.com/apache/jspwiki
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/jspwiki
2
reference_url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12407
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jspwiki-wiki.apache.org/Wiki.jsp?page=CVE-2019-12407
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-12407
reference_id CVE-2019-12407
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-12407
fixed_packages
0
url pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
purl pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5
aliases CVE-2019-12407, GHSA-p2r4-rpj8-m2p9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y618-1jjp-b7gz
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.jspwiki/jspwiki-main@2.11.0.M5