Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-35e4-h5zk-5ffn
SummaryA command inject vulnerability allows an attacker to perform command injection on Windows applications that indirectly depend on the CreateProcess function when the specific conditions are satisfied.
Aliases
0
alias CVE-2024-3566
Fixed_packages
0
url pkg:deb/debian/nodejs@0?distro=trixie
purl pkg:deb/debian/nodejs@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@0%3Fdistro=trixie
1
url pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4?distro=trixie
purl pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp3-fzdr-yqbm
1
vulnerability VCID-2t7c-dju9-pff6
2
vulnerability VCID-38k9-23j3-eqh7
3
vulnerability VCID-43sf-4r41-wugc
4
vulnerability VCID-96yh-1wub-zucg
5
vulnerability VCID-98fy-tedc-ube7
6
vulnerability VCID-bjza-25hu-vkad
7
vulnerability VCID-dgkh-jdah-wfh9
8
vulnerability VCID-dt7u-3usg-9uet
9
vulnerability VCID-kj75-vmwa-gqgq
10
vulnerability VCID-sag8-repb-g3f4
11
vulnerability VCID-twc8-ewm7-wkb1
12
vulnerability VCID-u8bq-8jp4-jkem
13
vulnerability VCID-v7uy-445x-tuan
14
vulnerability VCID-x1an-pjq4-nbby
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@12.22.12~dfsg-1~deb11u4%3Fdistro=trixie
2
url pkg:deb/debian/nodejs@18.20.4%2Bdfsg-1~deb12u1?distro=trixie
purl pkg:deb/debian/nodejs@18.20.4%2Bdfsg-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vp3-fzdr-yqbm
1
vulnerability VCID-2t7c-dju9-pff6
2
vulnerability VCID-43sf-4r41-wugc
3
vulnerability VCID-96yh-1wub-zucg
4
vulnerability VCID-98fy-tedc-ube7
5
vulnerability VCID-bjza-25hu-vkad
6
vulnerability VCID-dgkh-jdah-wfh9
7
vulnerability VCID-dt7u-3usg-9uet
8
vulnerability VCID-twc8-ewm7-wkb1
9
vulnerability VCID-u8bq-8jp4-jkem
10
vulnerability VCID-v7uy-445x-tuan
11
vulnerability VCID-wf5t-3pwz-c7d7
12
vulnerability VCID-x1an-pjq4-nbby
13
vulnerability VCID-xkpz-pb5y-jqcy
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@18.20.4%252Bdfsg-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/nodejs@20.19.2%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@20.19.2%252Bdfsg-1%3Fdistro=trixie
4
url pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-1?distro=trixie
purl pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@22.22.2%252Bdfsg%252B~cs22.19.15-1%3Fdistro=trixie
5
url pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-3?distro=trixie
purl pkg:deb/debian/nodejs@22.22.2%2Bdfsg%2B~cs22.19.15-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nodejs@22.22.2%252Bdfsg%252B~cs22.19.15-3%3Fdistro=trixie
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-3566
reference_id
reference_type
scores
0
value 0.0709
scoring_system epss
scoring_elements 0.91485
published_at 2026-04-02T12:55:00Z
1
value 0.0709
scoring_system epss
scoring_elements 0.91541
published_at 2026-04-18T12:55:00Z
2
value 0.0709
scoring_system epss
scoring_elements 0.91546
published_at 2026-04-16T12:55:00Z
3
value 0.0709
scoring_system epss
scoring_elements 0.91526
published_at 2026-04-12T12:55:00Z
4
value 0.0709
scoring_system epss
scoring_elements 0.91524
published_at 2026-04-13T12:55:00Z
5
value 0.0709
scoring_system epss
scoring_elements 0.91519
published_at 2026-04-09T12:55:00Z
6
value 0.0709
scoring_system epss
scoring_elements 0.91513
published_at 2026-04-08T12:55:00Z
7
value 0.0709
scoring_system epss
scoring_elements 0.915
published_at 2026-04-07T12:55:00Z
8
value 0.0709
scoring_system epss
scoring_elements 0.91492
published_at 2026-04-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-3566
1
reference_url https://kb.cert.org/vuls/id/123335
reference_id 123335
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://kb.cert.org/vuls/id/123335
2
reference_url https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/
reference_id batbadbut-you-cant-securely-execute-commands-on-windows
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/
3
reference_url https://www.cve.org/CVERecord?id=CVE-2024-1874
reference_id CVERecord?id=CVE-2024-1874
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://www.cve.org/CVERecord?id=CVE-2024-1874
4
reference_url https://www.cve.org/CVERecord?id=CVE-2024-22423
reference_id CVERecord?id=CVE-2024-22423
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://www.cve.org/CVERecord?id=CVE-2024-22423
5
reference_url https://www.cve.org/CVERecord?id=CVE-2024-24576
reference_id CVERecord?id=CVE-2024-24576
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://www.cve.org/CVERecord?id=CVE-2024-24576
6
reference_url https://learn.microsoft.com/en-us/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way
reference_id everyone-quotes-command-line-arguments-the-wrong-way
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2024-04-15T16:13:02Z/
url https://learn.microsoft.com/en-us/archive/blogs/twistylittlepassagesallalike/everyone-quotes-command-line-arguments-the-wrong-way
Weaknesses
0
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Exploits
Severity_range_score9.8 - 9.8
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-35e4-h5zk-5ffn