Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-kv8r-8w6r-77ff |
| Summary | |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
1289 |
| name |
Improper Validation of Unsafe Equivalence in Input |
| description |
The product receives an input value that is used as a resource identifier or other type of reference, but it does not validate or incorrectly validates that the input is equivalent to a potentially-unsafe value. |
|
| 1 |
| cwe_id |
1287 |
| name |
Improper Validation of Specified Type of Input |
| description |
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type. |
|
|
| Exploits |
|
| Severity_range_score | 6.5 - 7.5 |
| Exploitability | 0.5 |
| Weighted_severity | 5.9 |
| Risk_score | 3.0 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-kv8r-8w6r-77ff |