Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xt2u-n7bw-nben
SummaryIn Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
Aliases
0
alias CVE-2017-15720
1
alias GHSA-8fg4-j562-mjrc
2
alias PYSEC-2019-147
Fixed_packages
0
url pkg:pypi/apache-airflow@1.9.0
purl pkg:pypi/apache-airflow@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-91n6-evww-zybp
21
vulnerability VCID-98yf-mvnw-d3b4
22
vulnerability VCID-9jm4-t1je-vqhm
23
vulnerability VCID-9tq4-v733-hug3
24
vulnerability VCID-amac-hqnj-xfgz
25
vulnerability VCID-b3w3-h9cm-ufgm
26
vulnerability VCID-bwd5-3jt5-pyb8
27
vulnerability VCID-cahz-4dy7-bbe9
28
vulnerability VCID-dh4r-77xc-cbas
29
vulnerability VCID-due7-n14c-akfx
30
vulnerability VCID-ez45-qkb4-xkba
31
vulnerability VCID-fbjk-2uvy-mqfc
32
vulnerability VCID-frbp-mhhr-8bdt
33
vulnerability VCID-gz6e-b7dz-5qdf
34
vulnerability VCID-h6sp-398p-pbeg
35
vulnerability VCID-hah6-e5fc-juc5
36
vulnerability VCID-hy75-nfg7-zfae
37
vulnerability VCID-j86y-n37n-n7ft
38
vulnerability VCID-jq98-gxbc-pydt
39
vulnerability VCID-kh46-xrgm-9udx
40
vulnerability VCID-ks8d-9vr8-4feh
41
vulnerability VCID-mcbu-b45m-k3ck
42
vulnerability VCID-njyy-ywer-x7bf
43
vulnerability VCID-p9we-cpy2-17h4
44
vulnerability VCID-pe8h-9hgu-j3hx
45
vulnerability VCID-pybp-gfy8-2qcr
46
vulnerability VCID-pypb-cezm-rkb2
47
vulnerability VCID-q83y-d2x7-m7hv
48
vulnerability VCID-q84t-8dac-93dm
49
vulnerability VCID-qehu-58hj-67gn
50
vulnerability VCID-qmpd-946c-gqbc
51
vulnerability VCID-qr9h-6dg8-gkh3
52
vulnerability VCID-quaj-w9r3-qya8
53
vulnerability VCID-reu2-2xcq-fqa4
54
vulnerability VCID-ryct-uaw3-fyfc
55
vulnerability VCID-suwt-h1ze-mydu
56
vulnerability VCID-t3ap-dzfp-1bd6
57
vulnerability VCID-t476-g5u5-1yeh
58
vulnerability VCID-trd4-8vc9-ufab
59
vulnerability VCID-u5wv-47m4-8yd6
60
vulnerability VCID-x9ns-34nt-gfer
61
vulnerability VCID-xh7u-8ze6-cqhk
62
vulnerability VCID-xunf-mqrn-97f5
63
vulnerability VCID-y7az-a4um-jqff
64
vulnerability VCID-ydhm-m8vh-mber
65
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.9.0
Affected_packages
0
url pkg:pypi/apache-airflow@1.8.1
purl pkg:pypi/apache-airflow@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.1
1
url pkg:pypi/apache-airflow@1.8.2rc1
purl pkg:pypi/apache-airflow@1.8.2rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2rc1
2
url pkg:pypi/apache-airflow@1.8.2
purl pkg:pypi/apache-airflow@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fnz-jqpe-nuau
1
vulnerability VCID-2xr2-w3hk-auck
2
vulnerability VCID-2ysx-9hz5-fyfm
3
vulnerability VCID-3h3z-bfsc-jqax
4
vulnerability VCID-4dpy-dzpr-bbg7
5
vulnerability VCID-4ga6-4111-dyc9
6
vulnerability VCID-4xax-xw67-2qfv
7
vulnerability VCID-4xdb-1kww-sfdh
8
vulnerability VCID-56eq-awhd-d3fr
9
vulnerability VCID-5cpd-kjpb-ekhv
10
vulnerability VCID-5yxa-ubfq-fqdx
11
vulnerability VCID-5zmy-2ape-7qfa
12
vulnerability VCID-6c7g-ws6x-yygu
13
vulnerability VCID-6gjt-zsju-47a3
14
vulnerability VCID-6ksf-tekv-dud3
15
vulnerability VCID-6vg9-hu9u-q7c3
16
vulnerability VCID-71hr-1ews-9qa6
17
vulnerability VCID-7zef-tgy9-kkh6
18
vulnerability VCID-82kk-s7d6-f7he
19
vulnerability VCID-835a-arqz-g7h7
20
vulnerability VCID-8h35-s38x-buey
21
vulnerability VCID-91n6-evww-zybp
22
vulnerability VCID-98yf-mvnw-d3b4
23
vulnerability VCID-9jm4-t1je-vqhm
24
vulnerability VCID-9tq4-v733-hug3
25
vulnerability VCID-amac-hqnj-xfgz
26
vulnerability VCID-asrx-5a3k-r3gs
27
vulnerability VCID-b3w3-h9cm-ufgm
28
vulnerability VCID-bwd5-3jt5-pyb8
29
vulnerability VCID-cahz-4dy7-bbe9
30
vulnerability VCID-dh4r-77xc-cbas
31
vulnerability VCID-due7-n14c-akfx
32
vulnerability VCID-e737-kzbj-37gg
33
vulnerability VCID-ez45-qkb4-xkba
34
vulnerability VCID-fbjk-2uvy-mqfc
35
vulnerability VCID-frbp-mhhr-8bdt
36
vulnerability VCID-gz6e-b7dz-5qdf
37
vulnerability VCID-h6sp-398p-pbeg
38
vulnerability VCID-hah6-e5fc-juc5
39
vulnerability VCID-hy75-nfg7-zfae
40
vulnerability VCID-j86y-n37n-n7ft
41
vulnerability VCID-jq98-gxbc-pydt
42
vulnerability VCID-kh46-xrgm-9udx
43
vulnerability VCID-ks8d-9vr8-4feh
44
vulnerability VCID-mcbu-b45m-k3ck
45
vulnerability VCID-njyy-ywer-x7bf
46
vulnerability VCID-p9we-cpy2-17h4
47
vulnerability VCID-pe8h-9hgu-j3hx
48
vulnerability VCID-pybp-gfy8-2qcr
49
vulnerability VCID-pypb-cezm-rkb2
50
vulnerability VCID-q83y-d2x7-m7hv
51
vulnerability VCID-q84t-8dac-93dm
52
vulnerability VCID-qehu-58hj-67gn
53
vulnerability VCID-qmpd-946c-gqbc
54
vulnerability VCID-qr9h-6dg8-gkh3
55
vulnerability VCID-quaj-w9r3-qya8
56
vulnerability VCID-reu2-2xcq-fqa4
57
vulnerability VCID-ryct-uaw3-fyfc
58
vulnerability VCID-suwt-h1ze-mydu
59
vulnerability VCID-t3ap-dzfp-1bd6
60
vulnerability VCID-t476-g5u5-1yeh
61
vulnerability VCID-trd4-8vc9-ufab
62
vulnerability VCID-u5wv-47m4-8yd6
63
vulnerability VCID-x9ns-34nt-gfer
64
vulnerability VCID-xh7u-8ze6-cqhk
65
vulnerability VCID-xt2u-n7bw-nben
66
vulnerability VCID-xunf-mqrn-97f5
67
vulnerability VCID-y7az-a4um-jqff
68
vulnerability VCID-ydhm-m8vh-mber
69
vulnerability VCID-z4w8-3mr1-63ed
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2
References
0
reference_url https://github.com/advisories/GHSA-8fg4-j562-mjrc
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-8fg4-j562-mjrc
1
reference_url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-15720
reference_id CVE-2017-15720
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-15720
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xt2u-n7bw-nben