Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/34959?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/34959?format=api", "vulnerability_id": "VCID-n2eg-vn4k-yycf", "summary": "The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.", "aliases": [ { "alias": "CVE-2015-3982" }, { "alias": "GHSA-6wgp-fwfm-mxp3" }, { "alias": "PYSEC-2015-19" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/124792?format=api", "purl": "pkg:deb/debian/python-django@0?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@0%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/124779?format=api", "purl": "pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2as8-7qx6-2kba" }, { "vulnerability": "VCID-4gpn-bf2d-ybfb" }, { "vulnerability": "VCID-55xg-pw9n-zkdy" }, { "vulnerability": "VCID-9gq3-whr8-s7b8" }, { "vulnerability": "VCID-abpe-htm1-9ubp" }, { "vulnerability": "VCID-eqsc-axng-ckca" }, { "vulnerability": "VCID-fsz5-dkw2-hyap" }, { "vulnerability": "VCID-fxuu-kk52-r7ch" }, { "vulnerability": "VCID-ga7z-wj4j-63h1" }, { "vulnerability": "VCID-hsjn-xnpp-5yeh" }, { "vulnerability": "VCID-kxdd-yzp3-r7cb" }, { "vulnerability": "VCID-m4am-h2ea-3ffr" }, { "vulnerability": "VCID-phkp-9abp-f3dq" }, { "vulnerability": "VCID-rqqc-ta7c-ykgx" }, { "vulnerability": "VCID-tktt-vg92-6kae" }, { "vulnerability": "VCID-tuqc-c251-h7ds" }, { "vulnerability": "VCID-w777-44ns-cybg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/124777?format=api", "purl": "pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2as8-7qx6-2kba" }, { "vulnerability": "VCID-4gpn-bf2d-ybfb" }, { "vulnerability": "VCID-55xg-pw9n-zkdy" }, { "vulnerability": "VCID-9gq3-whr8-s7b8" }, { "vulnerability": "VCID-abpe-htm1-9ubp" }, { "vulnerability": "VCID-eqsc-axng-ckca" }, { "vulnerability": "VCID-fsz5-dkw2-hyap" }, { "vulnerability": "VCID-fxuu-kk52-r7ch" }, { "vulnerability": "VCID-ga7z-wj4j-63h1" }, { "vulnerability": "VCID-hsjn-xnpp-5yeh" }, { "vulnerability": "VCID-kxdd-yzp3-r7cb" }, { "vulnerability": "VCID-m4am-h2ea-3ffr" }, { "vulnerability": "VCID-phkp-9abp-f3dq" }, { "vulnerability": "VCID-rqqc-ta7c-ykgx" }, { "vulnerability": "VCID-tktt-vg92-6kae" }, { "vulnerability": "VCID-tuqc-c251-h7ds" }, { "vulnerability": "VCID-w777-44ns-cybg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/124782?format=api", "purl": "pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2as8-7qx6-2kba" }, { "vulnerability": "VCID-4gpn-bf2d-ybfb" }, { "vulnerability": "VCID-55xg-pw9n-zkdy" }, { "vulnerability": "VCID-abpe-htm1-9ubp" }, { "vulnerability": "VCID-eqsc-axng-ckca" }, { "vulnerability": "VCID-fsz5-dkw2-hyap" }, { "vulnerability": "VCID-fxuu-kk52-r7ch" }, { "vulnerability": "VCID-ga7z-wj4j-63h1" }, { "vulnerability": "VCID-kxdd-yzp3-r7cb" }, { "vulnerability": "VCID-m4am-h2ea-3ffr" }, { "vulnerability": "VCID-phkp-9abp-f3dq" }, { "vulnerability": "VCID-tktt-vg92-6kae" }, { "vulnerability": "VCID-tuqc-c251-h7ds" }, { "vulnerability": "VCID-w777-44ns-cybg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/124780?format=api", "purl": "pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-2as8-7qx6-2kba" }, { "vulnerability": "VCID-4gpn-bf2d-ybfb" }, { "vulnerability": "VCID-55xg-pw9n-zkdy" }, { "vulnerability": "VCID-abpe-htm1-9ubp" }, { "vulnerability": "VCID-eqsc-axng-ckca" }, { "vulnerability": "VCID-fsz5-dkw2-hyap" }, { "vulnerability": "VCID-fxuu-kk52-r7ch" }, { "vulnerability": "VCID-m4am-h2ea-3ffr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/124781?format=api", "purl": "pkg:deb/debian/python-django@3:5.2.15-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.15-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/8959?format=api", "purl": "pkg:pypi/django@1.8.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.2" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/8794?format=api", "purl": "pkg:pypi/django@1.8a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bahz-gfxv-e3b2" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-u6sd-648r-qbdb" }, { "vulnerability": "VCID-vacy-878s-3kfb" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8795?format=api", "purl": "pkg:pypi/django@1.8b1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bahz-gfxv-e3b2" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-u6sd-648r-qbdb" }, { "vulnerability": "VCID-vacy-878s-3kfb" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8797?format=api", "purl": "pkg:pypi/django@1.8b2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bahz-gfxv-e3b2" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-vacy-878s-3kfb" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b2" }, { "url": "http://public2.vulnerablecode.io/api/packages/188026?format=api", "purl": "pkg:pypi/django@1.8c1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8c1" }, { "url": "http://public2.vulnerablecode.io/api/packages/8957?format=api", "purl": "pkg:pypi/django@1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/8958?format=api", "purl": "pkg:pypi/django@1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-12d7-vc63-rkdy" }, { "vulnerability": "VCID-29qk-rv5n-efbm" }, { "vulnerability": "VCID-3kza-a88p-kfg7" }, { "vulnerability": "VCID-4tyd-97z5-z3ar" }, { "vulnerability": "VCID-5q58-pzt4-8uey" }, { "vulnerability": "VCID-6w99-8w84-jkh9" }, { "vulnerability": "VCID-6wah-r8vr-5qc4" }, { "vulnerability": "VCID-8gus-er59-1qak" }, { "vulnerability": "VCID-9mpt-zxaw-kkeg" }, { "vulnerability": "VCID-bb8b-hq41-s7a6" }, { "vulnerability": "VCID-c58g-7jpv-t7hc" }, { "vulnerability": "VCID-d62f-7csz-fuhm" }, { "vulnerability": "VCID-ga69-9y5g-77c3" }, { "vulnerability": "VCID-jfya-694v-myar" }, { "vulnerability": "VCID-kq8u-td31-uqaa" }, { "vulnerability": "VCID-ksh8-pazn-dbca" }, { "vulnerability": "VCID-mccp-khb9-qkb7" }, { "vulnerability": "VCID-n2eg-vn4k-yycf" }, { "vulnerability": "VCID-qy2a-mvpz-q7eh" }, { "vulnerability": "VCID-rruq-9scz-vbg8" }, { "vulnerability": "VCID-rxxr-sseq-k7a9" }, { "vulnerability": "VCID-upbz-vg19-rugv" }, { "vulnerability": "VCID-vdpf-jddk-syda" }, { "vulnerability": "VCID-weqb-fxu4-17e7" }, { "vulnerability": "VCID-whgc-pt2s-77ar" }, { "vulnerability": "VCID-x61x-6b6k-h3bn" }, { "vulnerability": "VCID-ynt9-h6ww-h7e9" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.1" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3982.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3982.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3982", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00225", "scoring_system": "epss", "scoring_elements": "0.45265", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00225", "scoring_system": "epss", "scoring_elements": "0.45317", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00225", "scoring_system": "epss", "scoring_elements": "0.45337", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00225", "scoring_system": "epss", "scoring_elements": "0.45333", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00225", "scoring_system": "epss", "scoring_elements": "0.45291", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3982" }, { "reference_url": "https://github.com/django/django", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django" }, { "reference_url": "https://github.com/django/django/commit/31cb25adecba930bdeee4556709f5a1c42d88fd6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/django/django/commit/31cb25adecba930bdeee4556709f5a1c42d88fd6" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-19.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-19.yaml" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3982", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3982" }, { "reference_url": "https://web.archive.org/web/20200228092138/http://www.securityfocus.com/bid/74960", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20200228092138/http://www.securityfocus.com/bid/74960" }, { "reference_url": "https://www.djangoproject.com/weblog/2015/may/20/security-release", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "6.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.djangoproject.com/weblog/2015/may/20/security-release" }, { "reference_url": "https://www.djangoproject.com/weblog/2015/may/20/security-release/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://www.djangoproject.com/weblog/2015/may/20/security-release/" }, { "reference_url": "http://www.securityfocus.com/bid/74960", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/74960" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221526", "reference_id": "1221526", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221526" }, { "reference_url": "https://github.com/advisories/GHSA-6wgp-fwfm-mxp3", "reference_id": "GHSA-6wgp-fwfm-mxp3", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6wgp-fwfm-mxp3" } ], "weaknesses": [ { "cwe_id": 384, "name": "Session Fixation", "description": "Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions." }, { "cwe_id": 613, "name": "Insufficient Session Expiration", "description": "According to WASC, Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "4.0 - 7.5", "exploitability": "0.5", "weighted_severity": "6.8", "risk_score": 3.4, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n2eg-vn4k-yycf" }