Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-hct7-3wtx-xyew
SummaryKoji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
Aliases
0
alias CVE-2018-1002150
1
alias GHSA-6mww-xvh7-fq4f
2
alias PYSEC-2018-86
Fixed_packages
0
url pkg:pypi/koji@1.12.1
purl pkg:pypi/koji@1.12.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.12.1
1
url pkg:pypi/koji@1.13.1
purl pkg:pypi/koji@1.13.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.13.1
2
url pkg:pypi/koji@1.14.1
purl pkg:pypi/koji@1.14.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.14.1
3
url pkg:pypi/koji@1.15.1
purl pkg:pypi/koji@1.15.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.15.1
Affected_packages
0
url pkg:pypi/koji@1.12
purl pkg:pypi/koji@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hct7-3wtx-xyew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.12
1
url pkg:pypi/koji@1.13
purl pkg:pypi/koji@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hct7-3wtx-xyew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.13
2
url pkg:pypi/koji@1.14
purl pkg:pypi/koji@1.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hct7-3wtx-xyew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.14
3
url pkg:pypi/koji@1.15
purl pkg:pypi/koji@1.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hct7-3wtx-xyew
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.15
4
url pkg:pypi/koji@1.15.0
purl pkg:pypi/koji@1.15.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hct7-3wtx-xyew
1
vulnerability VCID-z9jd-u28p-qqek
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/koji@1.15.0
References
0
reference_url https://docs.pagure.org/koji/CVE-2018-1002150/
reference_id
reference_type
scores
url https://docs.pagure.org/koji/CVE-2018-1002150/
1
reference_url https://github.com/advisories/GHSA-6mww-xvh7-fq4f
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-6mww-xvh7-fq4f
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/koji/PYSEC-2018-86.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/koji/PYSEC-2018-86.yaml
3
reference_url https://pagure.io/koji
reference_id
reference_type
scores
url https://pagure.io/koji
4
reference_url https://pagure.io/koji/c/ab1ade7
reference_id
reference_type
scores
url https://pagure.io/koji/c/ab1ade7
5
reference_url https://pagure.io/koji/issue/850
reference_id
reference_type
scores
url https://pagure.io/koji/issue/850
6
reference_url https://docs.pagure.org/koji/CVE-2018-1002150
reference_id CVE-2018-1002150
reference_type
scores
url https://docs.pagure.org/koji/CVE-2018-1002150
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1002150
reference_id CVE-2018-1002150
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-1002150
Weaknesses
0
cwe_id 732
name Incorrect Permission Assignment for Critical Resource
description The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-hct7-3wtx-xyew