Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x9sz-6v3v-27cs
SummaryImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in org.xwiki.platform:xwiki-platform-web.
Aliases
0
alias CVE-2023-29207
1
alias GHSA-6vgh-9r3c-2cxp
Fixed_packages
0
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@13.10.10
1
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.4.6
2
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.9
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.9
3
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@13.10.10
4
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.4.6
5
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.9
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.9
6
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@13.10.10
7
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.4.6
8
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.9
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.9
9
url pkg:maven/org.xwiki.platform/xwiki-platform-web@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@13.10.10
10
url pkg:maven/org.xwiki.platform/xwiki-platform-web@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@14.4.6
11
url pkg:maven/org.xwiki.platform/xwiki-platform-web@14.9
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@14.9
12
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@13.10.10
13
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.4.6
14
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.9
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.9
15
url pkg:maven/org.xwiki.platform/xwiki-web-standard@13.10.10
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@13.10.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@13.10.10
16
url pkg:maven/org.xwiki.platform/xwiki-web-standard@14.4.6
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@14.4.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@14.4.6
17
url pkg:maven/org.xwiki.platform/xwiki-web-standard@14.9
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@14.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@14.9
Affected_packages
0
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.0-rc-1
1
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.5
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@14.5
2
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo@1.9-milestone-2
3
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.0-rc-1
4
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.5
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@14.5
5
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin@1.9-milestone-2
6
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@1.9-milestone-2
7
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.0-rc-1
8
url pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.5
purl pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-flamingo-skin-resources@14.5
9
url pkg:maven/org.xwiki.platform/xwiki-platform-web@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@1.9-milestone-2
10
url pkg:maven/org.xwiki.platform/xwiki-platform-web@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@14.0-rc-1
11
url pkg:maven/org.xwiki.platform/xwiki-platform-web@14.5
purl pkg:maven/org.xwiki.platform/xwiki-platform-web@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-75p5-h53n-v7h4
1
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web@14.5
12
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@1.9-milestone-2
13
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-w9nk-q6ay-d7db
1
vulnerability VCID-x9sz-6v3v-27cs
2
vulnerability VCID-zh8s-86cc-buga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.0-rc-1
14
url pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.5
purl pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sg58-af78-akc4
1
vulnerability VCID-w9nk-q6ay-d7db
2
vulnerability VCID-x9sz-6v3v-27cs
3
vulnerability VCID-zh8s-86cc-buga
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-platform-web-templates@14.5
15
url pkg:maven/org.xwiki.platform/xwiki-web-standard@1.9-milestone-2
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@1.9-milestone-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@1.9-milestone-2
16
url pkg:maven/org.xwiki.platform/xwiki-web-standard@14.0-rc-1
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@14.0-rc-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@14.0-rc-1
17
url pkg:maven/org.xwiki.platform/xwiki-web-standard@14.5
purl pkg:maven/org.xwiki.platform/xwiki-web-standard@14.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x9sz-6v3v-27cs
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.xwiki.platform/xwiki-web-standard@14.5
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29207
reference_id
reference_type
scores
0
value 0.1765
scoring_system epss
scoring_elements 0.95218
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29207
1
reference_url https://github.com/xwiki/xwiki-platform
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/xwiki/xwiki-platform
2
reference_url https://github.com/xwiki/xwiki-platform/commit/65ca06c51e7a1d5a579344c7272b2cc9a9a21126
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-06T17:09:16Z/
url https://github.com/xwiki/xwiki-platform/commit/65ca06c51e7a1d5a579344c7272b2cc9a9a21126
3
reference_url https://jira.xwiki.org/browse/XWIKI-15205
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-06T17:09:16Z/
url https://jira.xwiki.org/browse/XWIKI-15205
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29207
reference_id
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29207
5
reference_url https://github.com/advisories/GHSA-6vgh-9r3c-2cxp
reference_id GHSA-6vgh-9r3c-2cxp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6vgh-9r3c-2cxp
6
reference_url https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-6vgh-9r3c-2cxp
reference_id GHSA-6vgh-9r3c-2cxp
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-06T17:09:16Z/
url https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-6vgh-9r3c-2cxp
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity0.2
Risk_score0.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x9sz-6v3v-27cs