Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-7rdk-mw2k-eqdx

Summary

Axios Cross-Site Request Forgery Vulnerability
An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any host allowing attackers to view sensitive information.

Aliases

alias	CVE-2023-45857

alias	GHSA-wf5p-g6vw-rhxx

Fixed_packages

url pkg:deb/debian/node-axios@1.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie

purl pkg:deb/debian/node-axios@1.2.1%2Bdfsg-1%2Bdeb12u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-kgnf-z6ca-tqgp

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.2.1%252Bdfsg-1%252Bdeb12u1%3Fdistro=trixie

url pkg:deb/debian/node-axios@1.2.1%2Bdfsg-1%2Bdeb12u1

purl pkg:deb/debian/node-axios@1.2.1%2Bdfsg-1%2Bdeb12u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-kgnf-z6ca-tqgp

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.2.1%252Bdfsg-1%252Bdeb12u1

url	pkg:deb/debian/node-axios@1.6.2%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/node-axios@1.6.2%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.6.2%252Bdfsg-1%3Fdistro=trixie

url pkg:deb/debian/node-axios@1.8.4%2Bdfsg-1?distro=trixie

purl pkg:deb/debian/node-axios@1.8.4%2Bdfsg-1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-kgnf-z6ca-tqgp

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.8.4%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/node-axios@1.14.0%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/node-axios@1.14.0%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.14.0%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/node-axios@1.15.0-1?distro=trixie
purl	pkg:deb/debian/node-axios@1.15.0-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@1.15.0-1%3Fdistro=trixie

url pkg:npm/axios@0.28.0

purl pkg:npm/axios@0.28.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.28.0

url	pkg:npm/axios@1.0.0-alpha.1
purl	pkg:npm/axios@1.0.0-alpha.1
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.0.0-alpha.1

url pkg:npm/axios@1.6.0

purl pkg:npm/axios@1.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.6.0

Affected_packages

url pkg:deb/debian/node-axios@0.21.1%2Bdfsg-1%2Bdeb11u1

purl pkg:deb/debian/node-axios@0.21.1%2Bdfsg-1%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1vkx-cwua-rqe4

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-kgnf-z6ca-tqgp

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@0.21.1%252Bdfsg-1%252Bdeb11u1

url pkg:deb/debian/node-axios@0.21.1%2Bdfsg-1%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/node-axios@0.21.1%2Bdfsg-1%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-1vkx-cwua-rqe4

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-kgnf-z6ca-tqgp

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/node-axios@0.21.1%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie

url pkg:npm/axios@0.8.1

purl pkg:npm/axios@0.8.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.8.1

url pkg:npm/axios@0.9.0

purl pkg:npm/axios@0.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.9.0

url pkg:npm/axios@0.9.1

purl pkg:npm/axios@0.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.9.1

url pkg:npm/axios@0.10.0

purl pkg:npm/axios@0.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.10.0

url pkg:npm/axios@0.11.0

purl pkg:npm/axios@0.11.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.11.0

url pkg:npm/axios@0.11.1

purl pkg:npm/axios@0.11.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.11.1

url pkg:npm/axios@0.12.0

purl pkg:npm/axios@0.12.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.12.0

url pkg:npm/axios@0.13.0

purl pkg:npm/axios@0.13.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.13.0

url pkg:npm/axios@0.13.1

purl pkg:npm/axios@0.13.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.13.1

url pkg:npm/axios@0.14.0

purl pkg:npm/axios@0.14.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.14.0

url pkg:npm/axios@0.15.0

purl pkg:npm/axios@0.15.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.15.0

url pkg:npm/axios@0.15.1

purl pkg:npm/axios@0.15.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.15.1

url pkg:npm/axios@0.15.2

purl pkg:npm/axios@0.15.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.15.2

url pkg:npm/axios@0.15.3

purl pkg:npm/axios@0.15.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.15.3

url pkg:npm/axios@0.16.0

purl pkg:npm/axios@0.16.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.16.0

url pkg:npm/axios@0.16.1

purl pkg:npm/axios@0.16.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.16.1

url pkg:npm/axios@0.16.2

purl pkg:npm/axios@0.16.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.16.2

url pkg:npm/axios@0.17.0

purl pkg:npm/axios@0.17.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.17.0

url pkg:npm/axios@0.17.1

purl pkg:npm/axios@0.17.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.17.1

url pkg:npm/axios@0.18.0

purl pkg:npm/axios@0.18.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5b5u-3ngh-4fd9

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.18.0

url pkg:npm/axios@0.18.1

purl pkg:npm/axios@0.18.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.18.1

url pkg:npm/axios@0.19.0-beta.1

purl pkg:npm/axios@0.19.0-beta.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.19.0-beta.1

url pkg:npm/axios@0.19.0

purl pkg:npm/axios@0.19.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.19.0

url pkg:npm/axios@0.19.1

purl pkg:npm/axios@0.19.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.19.1

url pkg:npm/axios@0.19.2

purl pkg:npm/axios@0.19.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.19.2

url pkg:npm/axios@0.20.0-0

purl pkg:npm/axios@0.20.0-0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.20.0-0

url pkg:npm/axios@0.20.0

purl pkg:npm/axios@0.20.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.20.0

url pkg:npm/axios@0.21.0

purl pkg:npm/axios@0.21.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

vulnerability	VCID-xtpz-6f5t-t3ev

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.21.0

url pkg:npm/axios@0.21.1

purl pkg:npm/axios@0.21.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-n89f-3nkb-ebg3

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.21.1

url pkg:npm/axios@0.21.2

purl pkg:npm/axios@0.21.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.21.2

url pkg:npm/axios@0.21.3

purl pkg:npm/axios@0.21.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.21.3

url pkg:npm/axios@0.21.4

purl pkg:npm/axios@0.21.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.21.4

url pkg:npm/axios@0.22.0

purl pkg:npm/axios@0.22.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.22.0

url pkg:npm/axios@0.23.0

purl pkg:npm/axios@0.23.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.23.0

url pkg:npm/axios@0.24.0

purl pkg:npm/axios@0.24.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.24.0

url pkg:npm/axios@0.25.0

purl pkg:npm/axios@0.25.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.25.0

url pkg:npm/axios@0.26.0

purl pkg:npm/axios@0.26.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.26.0

url pkg:npm/axios@0.26.1

purl pkg:npm/axios@0.26.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.26.1

url pkg:npm/axios@0.27.0

purl pkg:npm/axios@0.27.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.27.0

url pkg:npm/axios@0.27.1

purl pkg:npm/axios@0.27.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.27.1

url pkg:npm/axios@0.27.2

purl pkg:npm/axios@0.27.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@0.27.2

url pkg:npm/axios@1.0.0

purl pkg:npm/axios@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-axk7-6q4b-vuga

vulnerability	VCID-ek49-tuj4-t3ap

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.0.0

url pkg:npm/axios@1.1.0

purl pkg:npm/axios@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.1.0

url pkg:npm/axios@1.1.1

purl pkg:npm/axios@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.1.1

url pkg:npm/axios@1.1.2

purl pkg:npm/axios@1.1.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.1.2

url pkg:npm/axios@1.1.3

purl pkg:npm/axios@1.1.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.1.3

url pkg:npm/axios@1.2.0-alpha.1

purl pkg:npm/axios@1.2.0-alpha.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.0-alpha.1

url pkg:npm/axios@1.2.0

purl pkg:npm/axios@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.0

url pkg:npm/axios@1.2.1

purl pkg:npm/axios@1.2.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.1

url pkg:npm/axios@1.2.2

purl pkg:npm/axios@1.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.2

url pkg:npm/axios@1.2.3

purl pkg:npm/axios@1.2.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.3

url pkg:npm/axios@1.2.4

purl pkg:npm/axios@1.2.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.4

url pkg:npm/axios@1.2.5

purl pkg:npm/axios@1.2.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.5

url pkg:npm/axios@1.2.6

purl pkg:npm/axios@1.2.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.2.6

url pkg:npm/axios@1.3.0

purl pkg:npm/axios@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.0

url pkg:npm/axios@1.3.1

purl pkg:npm/axios@1.3.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.1

url pkg:npm/axios@1.3.2

purl pkg:npm/axios@1.3.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.2

url pkg:npm/axios@1.3.3

purl pkg:npm/axios@1.3.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.3

url pkg:npm/axios@1.3.4

purl pkg:npm/axios@1.3.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.4

url pkg:npm/axios@1.3.5

purl pkg:npm/axios@1.3.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.5

url pkg:npm/axios@1.3.6

purl pkg:npm/axios@1.3.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.3.6

url pkg:npm/axios@1.4.0

purl pkg:npm/axios@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.4.0

url pkg:npm/axios@1.5.0

purl pkg:npm/axios@1.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.5.0

url pkg:npm/axios@1.5.1

purl pkg:npm/axios@1.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-aq84-8cnz-byax

vulnerability	VCID-epu9-wdt3-kbay

vulnerability	VCID-hq6f-86aj-8yav

vulnerability	VCID-x41s-g5mh-pkdq

resource_url http://public2.vulnerablecode.io/packages/pkg:npm/axios@1.5.1

url pkg:rpm/redhat/automation-controller@4.5.5-2?arch=el8ap

purl pkg:rpm/redhat/automation-controller@4.5.5-2?arch=el8ap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-43fr-z5nf-cqax

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-8xgs-8xjr-cber

vulnerability	VCID-jxqg-x9dh-z3hb

vulnerability	VCID-np94-ghhk-nug4

vulnerability	VCID-pmr9-w1fc-93cm

vulnerability	VCID-pqus-ew4j-k7da

vulnerability	VCID-y7f5-9nmg-w7b3

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.5.5-2%3Farch=el8ap

url pkg:rpm/redhat/automation-controller@4.5.5-2?arch=el9ap

purl pkg:rpm/redhat/automation-controller@4.5.5-2?arch=el9ap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-43fr-z5nf-cqax

vulnerability	VCID-48jq-1u5d-tkan

vulnerability	VCID-7rdk-mw2k-eqdx

vulnerability	VCID-8xgs-8xjr-cber

vulnerability	VCID-jxqg-x9dh-z3hb

vulnerability	VCID-np94-ghhk-nug4

vulnerability	VCID-pmr9-w1fc-93cm

vulnerability	VCID-pqus-ew4j-k7da

vulnerability	VCID-y7f5-9nmg-w7b3

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.5.5-2%3Farch=el9ap

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45857.json

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-45857.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2023-45857

reference_id

reference_type

scores

value	0.00132
scoring_system	epss
scoring_elements	0.32751
published_at	2026-04-16T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32711
published_at	2026-04-13T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32842
published_at	2026-04-02T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32775
published_at	2026-04-11T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32738
published_at	2026-04-12T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32878
published_at	2026-04-04T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32699
published_at	2026-04-07T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32747
published_at	2026-04-08T12:55:00Z

value	0.00132
scoring_system	epss
scoring_elements	0.32773
published_at	2026-04-09T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2023-45857

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45857
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-45857

reference_url

https://github.com/axios/axios

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios

reference_url

https://github.com/axios/axios/commit/2755df562b9c194fba6d8b609a383443f6a6e967

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/commit/2755df562b9c194fba6d8b609a383443f6a6e967

reference_url

https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/commit/96ee232bd3ee4de2e657333d4d2191cd389e14d0

reference_url

https://github.com/axios/axios/issues/6006

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-04T15:13:57Z/

url

https://github.com/axios/axios/issues/6006

reference_url

https://github.com/axios/axios/issues/6022

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/issues/6022

reference_url

https://github.com/axios/axios/pull/6028

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/pull/6028

reference_url

https://github.com/axios/axios/pull/6091

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/pull/6091

reference_url

https://github.com/axios/axios/releases/tag/v0.28.0

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/releases/tag/v0.28.0

reference_url

https://github.com/axios/axios/releases/tag/v1.6.0

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/axios/axios/releases/tag/v1.6.0

reference_url

https://security.netapp.com/advisory/ntap-20240621-0006

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://security.netapp.com/advisory/ntap-20240621-0006

reference_url

https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

reference_id

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://security.snyk.io/vuln/SNYK-JS-AXIOS-6032459

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056099
reference_id	1056099
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056099

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2248979
reference_id	2248979
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2248979

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2023-45857

reference_id

CVE-2023-45857

reference_type

scores

value	6.5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2023-45857

reference_url

https://github.com/advisories/GHSA-wf5p-g6vw-rhxx

reference_id

GHSA-wf5p-g6vw-rhxx

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-wf5p-g6vw-rhxx

reference_url	https://access.redhat.com/errata/RHSA-2024:1925
reference_id	RHSA-2024:1925
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:1925

reference_url	https://access.redhat.com/errata/RHSA-2024:3314
reference_id	RHSA-2024:3314
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3314

reference_url	https://access.redhat.com/errata/RHSA-2024:3316
reference_id	RHSA-2024:3316
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3316

reference_url	https://access.redhat.com/errata/RHSA-2024:3473
reference_id	RHSA-2024:3473
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3473

reference_url	https://access.redhat.com/errata/RHSA-2024:3920
reference_id	RHSA-2024:3920
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:3920

reference_url	https://access.redhat.com/errata/RHSA-2024:4269
reference_id	RHSA-2024:4269
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4269

reference_url	https://access.redhat.com/errata/RHSA-2024:4455
reference_id	RHSA-2024:4455
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:4455

reference_url	https://access.redhat.com/errata/RHSA-2024:5314
reference_id	RHSA-2024:5314
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:5314

reference_url	https://access.redhat.com/errata/RHSA-2025:2876
reference_id	RHSA-2025:2876
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2025:2876

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	352
name	Cross-Site Request Forgery (CSRF)
description	The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rdk-mw2k-eqdx

Vulnerability Instance