Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mrxp-ecdk-gkfm
Summary
Mozilla developer John Schoenick reported that CSS pseudo-classes can
be used by web content to leak information on plugins that are installed but disabled.
This can be used for information disclosure through a fingerprinting attack that lists all
of the plugins installed by a user on a system, even when they are disabled.
Aliases
0
alias CVE-2016-2832
Fixed_packages
0
url pkg:mozilla/Firefox@47.0.0
purl pkg:mozilla/Firefox@47.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@47.0.0
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2832
reference_id CVE-2016-2832
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2832
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2016-59
reference_id mfsa2016-59
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2016-59
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mrxp-ecdk-gkfm