Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-tq3p-wsha-kfc6
Summary
Mozilla engineer Mark Goodwin discovered that the Firefox Health
Report (about:healthreport) accepts certain events from any content document
present in the remote-report iframe. If there were another vulnerability that allowed the
injection of web content into the Firefox Health Report iframe, this content could change
the sharing preferences of a user by firing the appropriate events at it    s containing
page.
Aliases
0
alias CVE-2016-2820
Fixed_packages
0
url pkg:mozilla/Firefox@46.0.0
purl pkg:mozilla/Firefox@46.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@46.0.0
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2820
reference_id CVE-2016-2820
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2820
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2016-48
reference_id mfsa2016-48
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2016-48
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-tq3p-wsha-kfc6