Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-4ctk-v1dr-27he

Summary WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions granted to extensions. This could allow an extension to interfere with the loading and usage of these pages and use capabilities that were intended to be restricted from extensions.

Aliases

alias	CVE-2018-18495

Fixed_packages

url	pkg:alpm/archlinux/firefox@64.0-1
purl	pkg:alpm/archlinux/firefox@64.0-1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@64.0-1

Affected_packages

url pkg:alpm/archlinux/firefox@63.0.3-1

purl pkg:alpm/archlinux/firefox@63.0.3-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4ctk-v1dr-27he

vulnerability	VCID-4rty-xgn3-fuby

vulnerability	VCID-9s3m-fes9-xqh2

vulnerability	VCID-axs7-cedu-23hw

vulnerability	VCID-bdbe-964v-pfht

vulnerability	VCID-btsh-x8sa-57fd

vulnerability	VCID-h916-7jyk-9qfn

vulnerability	VCID-p9vs-74e9-gqcf

vulnerability	VCID-xxkg-b8ep-6yga

resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/firefox@63.0.3-1

References

reference_url	https://security.archlinux.org/ASA-201812-9
reference_id	ASA-201812-9
reference_type
scores
url	https://security.archlinux.org/ASA-201812-9

reference_url

https://security.archlinux.org/AVG-833

reference_id

AVG-833

reference_type

scores

value	Critical
scoring_system	archlinux
scoring_elements

url

https://security.archlinux.org/AVG-833

reference_url

https://www.mozilla.org/en-US/security/advisories/mfsa2018-29

reference_id

mfsa2018-29

reference_type

scores

value	critical
scoring_system	generic_textual
scoring_elements

url

https://www.mozilla.org/en-US/security/advisories/mfsa2018-29

Weaknesses

Exploits

Severity_range_score 9.0 - 10.0

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ctk-v1dr-27he

Vulnerability Instance