Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zs6k-m2by-qqh4
Summary
Aliases
0
alias CVE-2023-40477
Fixed_packages
0
url pkg:deb/debian/libclamunrar@0.103.10-1~deb11u1?distro=trixie
purl pkg:deb/debian/libclamunrar@0.103.10-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libclamunrar@0.103.10-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/libclamunrar@1.0.3-1~deb12u1?distro=trixie
purl pkg:deb/debian/libclamunrar@1.0.3-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libclamunrar@1.0.3-1~deb12u1%3Fdistro=trixie
2
url pkg:deb/debian/libclamunrar@1.0.3-1?distro=trixie
purl pkg:deb/debian/libclamunrar@1.0.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libclamunrar@1.0.3-1%3Fdistro=trixie
3
url pkg:deb/debian/libclamunrar@1.3.1-1~deb12u1?distro=trixie
purl pkg:deb/debian/libclamunrar@1.3.1-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libclamunrar@1.3.1-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/libclamunrar@1.3.1-1?distro=trixie
purl pkg:deb/debian/libclamunrar@1.3.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libclamunrar@1.3.1-1%3Fdistro=trixie
5
url pkg:deb/debian/rar@2:6.23-1~deb11u1
purl pkg:deb/debian/rar@2:6.23-1~deb11u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sajr-p6ft-bfhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1
6
url pkg:deb/debian/rar@2:6.23-1~deb11u1?distro=trixie
purl pkg:deb/debian/rar@2:6.23-1~deb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sajr-p6ft-bfhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1%3Fdistro=trixie
7
url pkg:deb/debian/rar@2:6.23-1~deb12u1?distro=trixie
purl pkg:deb/debian/rar@2:6.23-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb12u1%3Fdistro=trixie
8
url pkg:deb/debian/rar@2:6.23-1?distro=trixie
purl pkg:deb/debian/rar@2:6.23-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1%3Fdistro=trixie
9
url pkg:deb/debian/rar@2:7.01-1~deb12u1?distro=trixie
purl pkg:deb/debian/rar@2:7.01-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.01-1~deb12u1%3Fdistro=trixie
10
url pkg:deb/debian/rar@2:7.11-1?distro=trixie
purl pkg:deb/debian/rar@2:7.11-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.11-1%3Fdistro=trixie
11
url pkg:deb/debian/rar@2:7.22-1?distro=trixie
purl pkg:deb/debian/rar@2:7.22-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.22-1%3Fdistro=trixie
12
url pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3
purl pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sajr-p6ft-bfhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3
13
url pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sajr-p6ft-bfhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3%3Fdistro=trixie
14
url pkg:deb/debian/unrar-nonfree@1:6.2.6-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.2.6-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-sajr-p6ft-bfhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.2.6-1%252Bdeb12u1%3Fdistro=trixie
15
url pkg:deb/debian/unrar-nonfree@1:6.2.10-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:6.2.10-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.2.10-1%3Fdistro=trixie
16
url pkg:deb/debian/unrar-nonfree@1:7.1.8-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:7.1.8-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.1.8-1%3Fdistro=trixie
17
url pkg:deb/debian/unrar-nonfree@1:7.2.6-1?distro=trixie
purl pkg:deb/debian/unrar-nonfree@1:7.2.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.6-1%3Fdistro=trixie
18
url pkg:ebuild/app-antivirus/clamav@1.4.1
purl pkg:ebuild/app-antivirus/clamav@1.4.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-antivirus/clamav@1.4.1
19
url pkg:ebuild/app-arch/rar@6.23
purl pkg:ebuild/app-arch/rar@6.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/rar@6.23
20
url pkg:ebuild/app-arch/unrar@6.2.10
purl pkg:ebuild/app-arch/unrar@6.2.10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.2.10
21
url pkg:ebuild/app-arch/unrar@6.23
purl pkg:ebuild/app-arch/unrar@6.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.23
Affected_packages
0
url pkg:deb/debian/rar@1:3.7b1-2
purl pkg:deb/debian/rar@1:3.7b1-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.7b1-2
1
url pkg:deb/debian/rar@1:3.8b3-1
purl pkg:deb/debian/rar@1:3.8b3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.8b3-1
2
url pkg:deb/debian/rar@2.02-2
purl pkg:deb/debian/rar@2.02-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.02-2
3
url pkg:deb/debian/rar@2:3.9.3-1
purl pkg:deb/debian/rar@2:3.9.3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:3.9.3-1
4
url pkg:deb/debian/rar@2:4.0.b3-1
purl pkg:deb/debian/rar@2:4.0.b3-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.0.b3-1
5
url pkg:deb/debian/rar@2:4.2.0-1
purl pkg:deb/debian/rar@2:4.2.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0-1
6
url pkg:deb/debian/rar@2:4.2.0%2Bdfsg.1-0.1
purl pkg:deb/debian/rar@2:4.2.0%2Bdfsg.1-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0%252Bdfsg.1-0.1
7
url pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
purl pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.4.0%252Bdfsg.1-0.1
8
url pkg:deb/debian/rar@2:5.5.0-1
purl pkg:deb/debian/rar@2:5.5.0-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.5.0-1
9
url pkg:deb/debian/rar@2.60-1
purl pkg:deb/debian/rar@2.60-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.60-1
10
url pkg:deb/debian/rar@2.80-2
purl pkg:deb/debian/rar@2.80-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.80-2
11
url pkg:deb/debian/rar@3.30-2
purl pkg:deb/debian/rar@3.30-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-x3kf-rwhu-jueh
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@3.30-2
12
url pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
purl pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2
13
url pkg:deb/debian/unrar-nonfree@1:3.5.4-1
purl pkg:deb/debian/unrar-nonfree@1:3.5.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1
14
url pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
purl pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1
15
url pkg:deb/debian/unrar-nonfree@1:3.8.2-1
purl pkg:deb/debian/unrar-nonfree@1:3.8.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.8.2-1
16
url pkg:deb/debian/unrar-nonfree@1:3.9.10-1
purl pkg:deb/debian/unrar-nonfree@1:3.9.10-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.9.10-1
17
url pkg:deb/debian/unrar-nonfree@1:4.1.4-1%2Bdeb7u1
purl pkg:deb/debian/unrar-nonfree@1:4.1.4-1%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:4.1.4-1%252Bdeb7u1
18
url pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
purl pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1
19
url pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%2Bdeb8u1
purl pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%252Bdeb8u1
20
url pkg:deb/debian/unrar-nonfree@1:5.3.2-1%2Bdeb9u1
purl pkg:deb/debian/unrar-nonfree@1:5.3.2-1%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-5v5m-6qfw-ffa6
2
vulnerability VCID-rmzd-fwfe-e7du
3
vulnerability VCID-t4mm-tnxa-abg6
4
vulnerability VCID-uavk-b7pk-vuga
5
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.3.2-1%252Bdeb9u1
21
url pkg:deb/debian/unrar-nonfree@1:5.6.6-1%2Bdeb10u1
purl pkg:deb/debian/unrar-nonfree@1:5.6.6-1%2Bdeb10u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4w11-tgxf-ekba
1
vulnerability VCID-uavk-b7pk-vuga
2
vulnerability VCID-zs6k-m2by-qqh4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.6.6-1%252Bdeb10u1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-40477
reference_id
reference_type
scores
0
value 0.91887
scoring_system epss
scoring_elements 0.99705
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-40477
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40477
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-40477
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://security.gentoo.org/glsa/202309-04
reference_id GLSA-202309-04
reference_type
scores
url https://security.gentoo.org/glsa/202309-04
4
reference_url https://security.gentoo.org/glsa/202507-03
reference_id GLSA-202507-03
reference_type
scores
url https://security.gentoo.org/glsa/202507-03
5
reference_url https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa
reference_id singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-18T13:35:58Z/
url https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa
6
reference_url https://usn.ubuntu.com/6569-1/
reference_id USN-6569-1
reference_type
scores
url https://usn.ubuntu.com/6569-1/
7
reference_url https://usn.ubuntu.com/7349-1/
reference_id USN-7349-1
reference_type
scores
url https://usn.ubuntu.com/7349-1/
8
reference_url https://usn.ubuntu.com/7350-1/
reference_id USN-7350-1
reference_type
scores
url https://usn.ubuntu.com/7350-1/
9
reference_url https://www.zerodayinitiative.com/advisories/ZDI-23-1152/
reference_id ZDI-23-1152
reference_type
scores
0
value 7.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-07-18T13:35:58Z/
url https://www.zerodayinitiative.com/advisories/ZDI-23-1152/
Weaknesses
0
cwe_id 129
name Improper Validation of Array Index
description The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Exploits
Severity_range_score7.8 - 7.8
Exploitability2.0
Weighted_severity4.7
Risk_score9.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zs6k-m2by-qqh4