Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ur8y-8uah-dkhf
SummaryMozilla developer Gabor Krizsanits discovered that XMLHttpRequest objects created within sandboxes have the system principal instead of the sandbox principal. This can lead to cross-site request forgery (CSRF) or information theft via an add-on running untrusted code in a sandbox.
Aliases
0
alias CVE-2012-4205
Fixed_packages
0
url pkg:mozilla/Firefox@17.0.0
purl pkg:mozilla/Firefox@17.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@17.0.0
1
url pkg:mozilla/SeaMonkey@2.14.0
purl pkg:mozilla/SeaMonkey@2.14.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/SeaMonkey@2.14.0
2
url pkg:mozilla/Thunderbird@17.0.0
purl pkg:mozilla/Thunderbird@17.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Thunderbird@17.0.0
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4205
reference_id CVE-2012-4205
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4205
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2012-97
reference_id mfsa2012-97
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2012-97
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ur8y-8uah-dkhf