Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-qdk1-p4qg-p3ar
Summary
Improper Input Validation
An information exposure and denial of service vulnerability exists in Jenkins Token Macro Plugin which allows attackers with the ability to control token macro input (such as SCM changelogs) to define recursive input that results in unexpected macro evaluation.
Aliases
0
alias CVE-2019-1003011
1
alias GHSA-23h9-m55m-c5jp
Fixed_packages
0
url pkg:maven/org.jenkins-ci.plugins/token-macro@2.6
purl pkg:maven/org.jenkins-ci.plugins/token-macro@2.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.plugins/token-macro@2.6
Affected_packages
0
url pkg:maven/org.jenkins-ci.plugins/token-macro@2.5
purl pkg:maven/org.jenkins-ci.plugins/token-macro@2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qdk1-p4qg-p3ar
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.plugins/token-macro@2.5
1
url pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e?arch=el7
purl pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-enterprise-service-catalog@1:3.11.82-1.git.1673.133961e%3Farch=el7
2
url pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.11.82-1.git.0.08bc31b%3Farch=el7
3
url pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0?arch=el7
purl pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-cluster-autoscaler@3.11.82-1.git.0.efb6af0%3Farch=el7
4
url pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9?arch=el7
purl pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-descheduler@3.11.82-1.git.300.89765c9%3Farch=el7
5
url pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383?arch=el7
purl pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-dockerregistry@3.11.82-1.git.452.0ce6383%3Farch=el7
6
url pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f?arch=el7
purl pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-metrics-server@3.11.82-1.git.52.2fdca3f%3Farch=el7
7
url pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936?arch=el7
purl pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-node-problem-detector@3.11.82-1.git.254.a448936%3Farch=el7
8
url pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758?arch=el7
purl pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-service-idler@3.11.82-1.git.14.e353758%3Farch=el7
9
url pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9?arch=el7
purl pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-web-console@3.11.82-1.git.355.5e8b1d9%3Farch=el7
10
url pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034?arch=el7
purl pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-openshift-oauth-proxy@3.11.82-1.git.425.7cac034%3Farch=el7
11
url pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-alertmanager@3.11.82-1.git.0.3bf41ce%3Farch=el7
12
url pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-node_exporter@3.11.82-1.git.1063.48444e8%3Farch=el7
13
url pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833?arch=el7
purl pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang-github-prometheus-prometheus@3.11.82-1.git.5027.9d24833%3Farch=el7
14
url pkg:rpm/redhat/haproxy@1.8.17-3?arch=el7
purl pkg:rpm/redhat/haproxy@1.8.17-3?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/haproxy@1.8.17-3%3Farch=el7
15
url pkg:rpm/redhat/jenkins@2.150.2.1549032159-1?arch=el7
purl pkg:rpm/redhat/jenkins@2.150.2.1549032159-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins@2.150.2.1549032159-1%3Farch=el7
16
url pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1?arch=el7
purl pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jenkins-2-plugins@3.11.1549642489-1%3Farch=el7
17
url pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a?arch=el7
purl pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.11.82-3.git.0.9718d0a%3Farch=el7
18
url pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-autoheal@3.11.82-1.git.219.0b5aff4%3Farch=el7
19
url pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51?arch=el7
purl pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1s7q-drqn-4bhd
1
vulnerability VCID-2hfm-g99a-67de
2
vulnerability VCID-2qhb-fu9x-k7bd
3
vulnerability VCID-31wf-mpnt-dycm
4
vulnerability VCID-48er-rqvk-nyhg
5
vulnerability VCID-537v-ugyf-17e2
6
vulnerability VCID-6ncw-2m21-t3bg
7
vulnerability VCID-8575-gsc8-xkd6
8
vulnerability VCID-8e1s-dgj6-vyfq
9
vulnerability VCID-a6ur-dzqs-hfge
10
vulnerability VCID-bmfa-vgay-2fbt
11
vulnerability VCID-cf29-8rvn-kfbd
12
vulnerability VCID-gmw4-qd6z-aqht
13
vulnerability VCID-qdk1-p4qg-p3ar
14
vulnerability VCID-uyuv-7nbj-zfcp
15
vulnerability VCID-ygq7-sv7h-7fax
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-enterprise-cluster-capacity@3.11.82-1.git.380.cf11c51%3Farch=el7
References
0
reference_url https://access.redhat.com/errata/RHBA-2019:0326
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2019:0326
1
reference_url https://access.redhat.com/errata/RHBA-2019:0327
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHBA-2019:0327
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003011.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-1003011.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-1003011
reference_id
reference_type
scores
0
value 0.00556
scoring_system epss
scoring_elements 0.68177
published_at 2026-04-18T12:55:00Z
1
value 0.00556
scoring_system epss
scoring_elements 0.68087
published_at 2026-04-02T12:55:00Z
2
value 0.00556
scoring_system epss
scoring_elements 0.68106
published_at 2026-04-04T12:55:00Z
3
value 0.00556
scoring_system epss
scoring_elements 0.68084
published_at 2026-04-07T12:55:00Z
4
value 0.00556
scoring_system epss
scoring_elements 0.68135
published_at 2026-04-08T12:55:00Z
5
value 0.00556
scoring_system epss
scoring_elements 0.6815
published_at 2026-04-09T12:55:00Z
6
value 0.00556
scoring_system epss
scoring_elements 0.68175
published_at 2026-04-11T12:55:00Z
7
value 0.00556
scoring_system epss
scoring_elements 0.68161
published_at 2026-04-12T12:55:00Z
8
value 0.00556
scoring_system epss
scoring_elements 0.68128
published_at 2026-04-13T12:55:00Z
9
value 0.00556
scoring_system epss
scoring_elements 0.68165
published_at 2026-04-16T12:55:00Z
10
value 0.00556
scoring_system epss
scoring_elements 0.68065
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-1003011
4
reference_url https://github.com/jenkinsci/token-macro-plugin/commit/70163600031ea8d43833e6eea928f8fa2e44f96a
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/jenkinsci/token-macro-plugin/commit/70163600031ea8d43833e6eea928f8fa2e44f96a
5
reference_url https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jenkins.io/security/advisory/2019-01-28/#SECURITY-1102
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1670296
reference_id 1670296
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1670296
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jenkins:token_macro:*:*:*:*:*:jenkins:*:*
reference_id cpe:2.3:a:jenkins:token_macro:*:*:*:*:*:jenkins:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jenkins:token_macro:*:*:*:*:*:jenkins:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-1003011
reference_id CVE-2019-1003011
reference_type
scores
0
value 5.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:N/A:P
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
2
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
3
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-1003011
10
reference_url https://github.com/advisories/GHSA-23h9-m55m-c5jp
reference_id GHSA-23h9-m55m-c5jp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-23h9-m55m-c5jp
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 674
name Uncontrolled Recursion
description The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 96
name Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')
description The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before inserting the input into an executable resource, such as a library, configuration file, or template.
Exploits
Severity_range_score4.0 - 8.1
Exploitability0.5
Weighted_severity7.3
Risk_score3.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-qdk1-p4qg-p3ar