Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-2e1q-fc4b-mydq
Summarysilverstripe/framework Privilege Escalation Risk in Member Edit form
Aliases
0
alias GHSA-xpff-c35g-j3cr
Fixed_packages
0
url pkg:composer/silverstripe/framework@3.5.8
purl pkg:composer/silverstripe/framework@3.5.8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.5.8
1
url pkg:composer/silverstripe/framework@3.6.6
purl pkg:composer/silverstripe/framework@3.6.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.6.6
2
url pkg:composer/silverstripe/framework@4.0.4
purl pkg:composer/silverstripe/framework@4.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.4
3
url pkg:composer/silverstripe/framework@4.1.1
purl pkg:composer/silverstripe/framework@4.1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.1
Affected_packages
0
url pkg:composer/silverstripe/framework@3.5.7-rc1
purl pkg:composer/silverstripe/framework@3.5.7-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2e1q-fc4b-mydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.5.7-rc1
1
url pkg:composer/silverstripe/framework@3.6.0-rc1
purl pkg:composer/silverstripe/framework@3.6.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2af9-znrv-3bf7
1
vulnerability VCID-2e1q-fc4b-mydq
2
vulnerability VCID-hp6e-75gr-uuan
3
vulnerability VCID-hsfb-xx67-7qg6
4
vulnerability VCID-k8vz-xw7w-e3dg
5
vulnerability VCID-yhh9-rkh9-rqeu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.6.0-rc1
2
url pkg:composer/silverstripe/framework@4.0.0-rc1
purl pkg:composer/silverstripe/framework@4.0.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-25r7-spjd-qufz
1
vulnerability VCID-2e1q-fc4b-mydq
2
vulnerability VCID-2p3r-ff36-aqfm
3
vulnerability VCID-6zn9-kt2q-s3bq
4
vulnerability VCID-c3aa-8je2-quek
5
vulnerability VCID-hp6e-75gr-uuan
6
vulnerability VCID-hsfb-xx67-7qg6
7
vulnerability VCID-jxym-rkhj-yybr
8
vulnerability VCID-k8vz-xw7w-e3dg
9
vulnerability VCID-mfzd-r5pm-q7es
10
vulnerability VCID-pmb3-k9w1-y7gm
11
vulnerability VCID-s99v-qdmh-ebf8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.0.0-rc1
3
url pkg:composer/silverstripe/framework@4.1.0-rc1
purl pkg:composer/silverstripe/framework@4.1.0-rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-25r7-spjd-qufz
1
vulnerability VCID-2e1q-fc4b-mydq
2
vulnerability VCID-2p3r-ff36-aqfm
3
vulnerability VCID-6zn9-kt2q-s3bq
4
vulnerability VCID-8z35-2baj-cqdb
5
vulnerability VCID-9wms-djy3-x7fs
6
vulnerability VCID-c3aa-8je2-quek
7
vulnerability VCID-fgmy-q8sf-n3dj
8
vulnerability VCID-jxym-rkhj-yybr
9
vulnerability VCID-mfzd-r5pm-q7es
10
vulnerability VCID-pmb3-k9w1-y7gm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@4.1.0-rc1
References
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-001-1.yaml
reference_id
reference_type
scores
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2018-001-1.yaml
1
reference_url https://github.com/silverstripe/silverstripe-framework/commit/577138882163e4b8782ea043487944d30d88e753
reference_id
reference_type
scores
url https://github.com/silverstripe/silverstripe-framework/commit/577138882163e4b8782ea043487944d30d88e753
2
reference_url https://github.com/silverstripe/silverstripe-framework/commit/e409d6f673c49846086b23677aecdc3fde5fc4d5
reference_id
reference_type
scores
url https://github.com/silverstripe/silverstripe-framework/commit/e409d6f673c49846086b23677aecdc3fde5fc4d5
3
reference_url https://www.silverstripe.org/download/security-releases/ss-2018-001
reference_id
reference_type
scores
url https://www.silverstripe.org/download/security-releases/ss-2018-001
4
reference_url https://github.com/advisories/GHSA-xpff-c35g-j3cr
reference_id GHSA-xpff-c35g-j3cr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xpff-c35g-j3cr
Weaknesses
0
cwe_id 268
name Privilege Chaining
description Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination.
Exploits
Severity_range_score4.0 - 6.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-2e1q-fc4b-mydq