Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-e293-3wep-hqc2
SummaryBottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that would not be accepted, as demonstrated in YouCompleteMe to execute arbitrary code.
Aliases
0
alias CVE-2014-3137
1
alias PYSEC-2014-77
Fixed_packages
0
url pkg:pypi/bottle@0.10.12
purl pkg:pypi/bottle@0.10.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.12
1
url pkg:pypi/bottle@0.11.7
purl pkg:pypi/bottle@0.11.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.7
2
url pkg:pypi/bottle@0.12.6
purl pkg:pypi/bottle@0.12.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.6
Affected_packages
0
url pkg:pypi/bottle@0.8.1
purl pkg:pypi/bottle@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.8.1
1
url pkg:pypi/bottle@0.8.2
purl pkg:pypi/bottle@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.8.2
2
url pkg:pypi/bottle@0.8.3
purl pkg:pypi/bottle@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.8.3
3
url pkg:pypi/bottle@0.8.4
purl pkg:pypi/bottle@0.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.8.4
4
url pkg:pypi/bottle@0.8.5
purl pkg:pypi/bottle@0.8.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.8.5
5
url pkg:pypi/bottle@0.9.1
purl pkg:pypi/bottle@0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.1
6
url pkg:pypi/bottle@0.9.2
purl pkg:pypi/bottle@0.9.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.2
7
url pkg:pypi/bottle@0.9.3
purl pkg:pypi/bottle@0.9.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.3
8
url pkg:pypi/bottle@0.9.4
purl pkg:pypi/bottle@0.9.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.4
9
url pkg:pypi/bottle@0.9.5
purl pkg:pypi/bottle@0.9.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.5
10
url pkg:pypi/bottle@0.9.6
purl pkg:pypi/bottle@0.9.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.6
11
url pkg:pypi/bottle@0.9.7
purl pkg:pypi/bottle@0.9.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.7
12
url pkg:pypi/bottle@0.9.8
purl pkg:pypi/bottle@0.9.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6f4p-1f4y-ryag
1
vulnerability VCID-e293-3wep-hqc2
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.9.8
13
url pkg:pypi/bottle@0.10.1
purl pkg:pypi/bottle@0.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.1
14
url pkg:pypi/bottle@0.10.2
purl pkg:pypi/bottle@0.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.2
15
url pkg:pypi/bottle@0.10.3
purl pkg:pypi/bottle@0.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.3
16
url pkg:pypi/bottle@0.10.4
purl pkg:pypi/bottle@0.10.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.4
17
url pkg:pypi/bottle@0.10.5
purl pkg:pypi/bottle@0.10.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.5
18
url pkg:pypi/bottle@0.10.6
purl pkg:pypi/bottle@0.10.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.6
19
url pkg:pypi/bottle@0.10.7
purl pkg:pypi/bottle@0.10.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.7
20
url pkg:pypi/bottle@0.10.8
purl pkg:pypi/bottle@0.10.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.8
21
url pkg:pypi/bottle@0.10.9
purl pkg:pypi/bottle@0.10.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.9
22
url pkg:pypi/bottle@0.10.10
purl pkg:pypi/bottle@0.10.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.10
23
url pkg:pypi/bottle@0.10.11
purl pkg:pypi/bottle@0.10.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.10.11
24
url pkg:pypi/bottle@0.11.1
purl pkg:pypi/bottle@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.1
25
url pkg:pypi/bottle@0.11.2
purl pkg:pypi/bottle@0.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.2
26
url pkg:pypi/bottle@0.11.3
purl pkg:pypi/bottle@0.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.3
27
url pkg:pypi/bottle@0.11.4
purl pkg:pypi/bottle@0.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.4
28
url pkg:pypi/bottle@0.11.5
purl pkg:pypi/bottle@0.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.5
29
url pkg:pypi/bottle@0.11.6
purl pkg:pypi/bottle@0.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.6
30
url pkg:pypi/bottle@0.12.1
purl pkg:pypi/bottle@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.1
31
url pkg:pypi/bottle@0.12.2
purl pkg:pypi/bottle@0.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.2
32
url pkg:pypi/bottle@0.12.3
purl pkg:pypi/bottle@0.12.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.3
33
url pkg:pypi/bottle@0.12.4
purl pkg:pypi/bottle@0.12.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.4
34
url pkg:pypi/bottle@0.12.5
purl pkg:pypi/bottle@0.12.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.5
References
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1093255
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1093255
1
reference_url https://github.com/defnull/bottle/issues/616
reference_id
reference_type
scores
url https://github.com/defnull/bottle/issues/616
2
reference_url http://www.debian.org/security/2014/dsa-2948
reference_id
reference_type
scores
url http://www.debian.org/security/2014/dsa-2948
3
reference_url http://www.openwall.com/lists/oss-security/2014/05/01/15
reference_id
reference_type
scores
url http://www.openwall.com/lists/oss-security/2014/05/01/15
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-e293-3wep-hqc2