Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-a738-ctkd-f3b4
Summary
Uncontrolled Ressource Consumption
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DoS) of MySQL Connectors as well as unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality, Integrity and Availability impacts).
Aliases
0
alias CVE-2023-21971
Fixed_packages
0
url pkg:pypi/mysql-connector-python@8.0.33
purl pkg:pypi/mysql-connector-python@8.0.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.33
Affected_packages
0
url pkg:maven/mysql-connector-java@8.0.0
purl pkg:maven/mysql-connector-java@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-a738-ctkd-f3b4
2
vulnerability VCID-e37q-8shh-v7aw
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/mysql-connector-java@8.0.0
1
url pkg:maven/mysql-connector-java@8.0.32
purl pkg:maven/mysql-connector-java@8.0.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a738-ctkd-f3b4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/mysql-connector-java@8.0.32
2
url pkg:pypi/mysql-connector-python@8.0.0
purl pkg:pypi/mysql-connector-python@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-7xu8-ktjc-huhp
2
vulnerability VCID-a738-ctkd-f3b4
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.0
3
url pkg:pypi/mysql-connector-python@8.0.5
purl pkg:pypi/mysql-connector-python@8.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-7xu8-ktjc-huhp
3
vulnerability VCID-a738-ctkd-f3b4
4
vulnerability VCID-hcw3-ymdx-pfas
5
vulnerability VCID-hpd4-t99c-zffu
6
vulnerability VCID-nr5y-ve9m-zfeh
7
vulnerability VCID-x8uc-src9-6uck
8
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.5
4
url pkg:pypi/mysql-connector-python@8.0.15
purl pkg:pypi/mysql-connector-python@8.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.15
5
url pkg:pypi/mysql-connector-python@8.0.16
purl pkg:pypi/mysql-connector-python@8.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.16
6
url pkg:pypi/mysql-connector-python@8.0.17
purl pkg:pypi/mysql-connector-python@8.0.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.17
7
url pkg:pypi/mysql-connector-python@8.0.18
purl pkg:pypi/mysql-connector-python@8.0.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.18
8
url pkg:pypi/mysql-connector-python@8.0.19
purl pkg:pypi/mysql-connector-python@8.0.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.19
9
url pkg:pypi/mysql-connector-python@8.0.20
purl pkg:pypi/mysql-connector-python@8.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-x8uc-src9-6uck
7
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.20
10
url pkg:pypi/mysql-connector-python@8.0.21
purl pkg:pypi/mysql-connector-python@8.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.21
11
url pkg:pypi/mysql-connector-python@8.0.22
purl pkg:pypi/mysql-connector-python@8.0.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.22
12
url pkg:pypi/mysql-connector-python@8.0.23
purl pkg:pypi/mysql-connector-python@8.0.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-hpd4-t99c-zffu
5
vulnerability VCID-nr5y-ve9m-zfeh
6
vulnerability VCID-ycu7-vn9v-kyce
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.23
13
url pkg:pypi/mysql-connector-python@8.0.24
purl pkg:pypi/mysql-connector-python@8.0.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-nr5y-ve9m-zfeh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.24
14
url pkg:pypi/mysql-connector-python@8.0.25
purl pkg:pypi/mysql-connector-python@8.0.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-nr5y-ve9m-zfeh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.25
15
url pkg:pypi/mysql-connector-python@8.0.26
purl pkg:pypi/mysql-connector-python@8.0.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w4j-hadb-w3e6
1
vulnerability VCID-5cf7-va9h-h3gy
2
vulnerability VCID-a738-ctkd-f3b4
3
vulnerability VCID-hcw3-ymdx-pfas
4
vulnerability VCID-nr5y-ve9m-zfeh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.26
16
url pkg:pypi/mysql-connector-python@8.0.27
purl pkg:pypi/mysql-connector-python@8.0.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cf7-va9h-h3gy
1
vulnerability VCID-a738-ctkd-f3b4
2
vulnerability VCID-hcw3-ymdx-pfas
3
vulnerability VCID-nr5y-ve9m-zfeh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.27
17
url pkg:pypi/mysql-connector-python@8.0.28
purl pkg:pypi/mysql-connector-python@8.0.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cf7-va9h-h3gy
1
vulnerability VCID-a738-ctkd-f3b4
2
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.28
18
url pkg:pypi/mysql-connector-python@8.0.29
purl pkg:pypi/mysql-connector-python@8.0.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a738-ctkd-f3b4
1
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.29
19
url pkg:pypi/mysql-connector-python@8.0.30
purl pkg:pypi/mysql-connector-python@8.0.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a738-ctkd-f3b4
1
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.30
20
url pkg:pypi/mysql-connector-python@8.0.31
purl pkg:pypi/mysql-connector-python@8.0.31
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a738-ctkd-f3b4
1
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.31
21
url pkg:pypi/mysql-connector-python@8.0.32
purl pkg:pypi/mysql-connector-python@8.0.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a738-ctkd-f3b4
1
vulnerability VCID-hcw3-ymdx-pfas
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mysql-connector-python@8.0.32
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-21971.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-21971.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-21971
reference_id
reference_type
scores
0
value 0.00143
scoring_system epss
scoring_elements 0.346
published_at 2026-04-02T12:55:00Z
1
value 0.00143
scoring_system epss
scoring_elements 0.34505
published_at 2026-04-13T12:55:00Z
2
value 0.00143
scoring_system epss
scoring_elements 0.34627
published_at 2026-04-04T12:55:00Z
3
value 0.00143
scoring_system epss
scoring_elements 0.34494
published_at 2026-04-07T12:55:00Z
4
value 0.00143
scoring_system epss
scoring_elements 0.34537
published_at 2026-04-08T12:55:00Z
5
value 0.00143
scoring_system epss
scoring_elements 0.34566
published_at 2026-04-09T12:55:00Z
6
value 0.00143
scoring_system epss
scoring_elements 0.34568
published_at 2026-04-11T12:55:00Z
7
value 0.00143
scoring_system epss
scoring_elements 0.34529
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-21971
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://www.oracle.com/security-alerts/cpuapr2023.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-16T14:38:46Z/
url https://www.oracle.com/security-alerts/cpuapr2023.html
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2196673
reference_id 2196673
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2196673
5
reference_url https://www.oracle.com/security-alerts/cpujul2023.html
reference_id cpujul2023.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-16T14:38:46Z/
url https://www.oracle.com/security-alerts/cpujul2023.html
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-21971
reference_id CVE-2023-21971
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-21971
7
reference_url https://security.netapp.com/advisory/ntap-20230427-0007/
reference_id ntap-20230427-0007
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-16T14:38:46Z/
url https://security.netapp.com/advisory/ntap-20230427-0007/
8
reference_url https://security.netapp.com/advisory/ntap-20230427-0010/
reference_id ntap-20230427-0010
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-16T14:38:46Z/
url https://security.netapp.com/advisory/ntap-20230427-0010/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 410
name Insufficient Resource Pool
description The product's resource pool is not large enough to handle peak demand, which allows an attacker to prevent others from accessing the resource by using a (relatively) large number of requests for resources.
Exploits
Severity_range_score5.3 - 5.3
Exploitability0.5
Weighted_severity4.8
Risk_score2.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-a738-ctkd-f3b4