Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8h35-s38x-buey
SummaryIt was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.
Aliases
0
alias CVE-2017-12614
1
alias GHSA-rv25-9wgj-xg75
2
alias PYSEC-2018-45
Fixed_packages
0
url pkg:pypi/apache-airflow@1.9.0
purl pkg:pypi/apache-airflow@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-91n6-evww-zybp
21
vulnerability VCID-98yf-mvnw-d3b4
22
vulnerability VCID-9jm4-t1je-vqhm
23
vulnerability VCID-9tq4-v733-hug3
24
vulnerability VCID-amac-hqnj-xfgz
25
vulnerability VCID-b3w3-h9cm-ufgm
26
vulnerability VCID-bwd5-3jt5-pyb8
27
vulnerability VCID-cahz-4dy7-bbe9
28
vulnerability VCID-dh4r-77xc-cbas
29
vulnerability VCID-due7-n14c-akfx
30
vulnerability VCID-ez45-qkb4-xkba
31
vulnerability VCID-fbjk-2uvy-mqfc
32
vulnerability VCID-frbp-mhhr-8bdt
33
vulnerability VCID-gz6e-b7dz-5qdf
34
vulnerability VCID-h6sp-398p-pbeg
35
vulnerability VCID-hah6-e5fc-juc5
36
vulnerability VCID-hy75-nfg7-zfae
37
vulnerability VCID-j86y-n37n-n7ft
38
vulnerability VCID-jq98-gxbc-pydt
39
vulnerability VCID-kh46-xrgm-9udx
40
vulnerability VCID-ks8d-9vr8-4feh
41
vulnerability VCID-mcbu-b45m-k3ck
42
vulnerability VCID-njyy-ywer-x7bf
43
vulnerability VCID-p9we-cpy2-17h4
44
vulnerability VCID-pe8h-9hgu-j3hx
45
vulnerability VCID-pybp-gfy8-2qcr
46
vulnerability VCID-pypb-cezm-rkb2
47
vulnerability VCID-q83y-d2x7-m7hv
48
vulnerability VCID-q84t-8dac-93dm
49
vulnerability VCID-qehu-58hj-67gn
50
vulnerability VCID-qmpd-946c-gqbc
51
vulnerability VCID-qr9h-6dg8-gkh3
52
vulnerability VCID-quaj-w9r3-qya8
53
vulnerability VCID-reu2-2xcq-fqa4
54
vulnerability VCID-ryct-uaw3-fyfc
55
vulnerability VCID-suwt-h1ze-mydu
56
vulnerability VCID-t3ap-dzfp-1bd6
57
vulnerability VCID-t476-g5u5-1yeh
58
vulnerability VCID-trd4-8vc9-ufab
59
vulnerability VCID-u5wv-47m4-8yd6
60
vulnerability VCID-x9ns-34nt-gfer
61
vulnerability VCID-xh7u-8ze6-cqhk
62
vulnerability VCID-xunf-mqrn-97f5
63
vulnerability VCID-y7az-a4um-jqff
64
vulnerability VCID-ydhm-m8vh-mber
65
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.9.0
Affected_packages
0
url pkg:pypi/apache-airflow@1.8.1
purl pkg:pypi/apache-airflow@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.1
1
url pkg:pypi/apache-airflow@1.8.2rc1
purl pkg:pypi/apache-airflow@1.8.2rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2rc1
2
url pkg:pypi/apache-airflow@1.8.2
purl pkg:pypi/apache-airflow@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2
References
0
reference_url https://github.com/apache/airflow
reference_id
reference_type
scores
url https://github.com/apache/airflow
1
reference_url https://github.com/apache/airflow/commit/e1a2d74c0045c9231f7a5365c956b8e048dd6af3
reference_id
reference_type
scores
url https://github.com/apache/airflow/commit/e1a2d74c0045c9231f7a5365c956b8e048dd6af3
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2018-45.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2018-45.yaml
3
reference_url https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f@%3Cdev.airflow.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/2c72480c76619c5e7793f0d213c34082f0598eaa4d212172f068940f@%3Cdev.airflow.apache.org%3E
4
reference_url https://devhub.checkmarx.com/cve-details/cve-2017-12614
reference_id CVE-2017-12614
reference_type
scores
url https://devhub.checkmarx.com/cve-details/cve-2017-12614
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-12614
reference_id CVE-2017-12614
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-12614
6
reference_url https://github.com/advisories/GHSA-rv25-9wgj-xg75
reference_id GHSA-rv25-9wgj-xg75
reference_type
scores
url https://github.com/advisories/GHSA-rv25-9wgj-xg75
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8h35-s38x-buey