Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ep11-vjnf-cfb5
Summary
Content-Type Insufficient Restrictions Bypass
There is a flaw in the json() function in bottle.py. The issue is due to the program using insufficient restrictions when parsing JSON content-types. This may allow a remote attacker to bypass access restrictions.
Aliases
0
alias OSVDB-106526
Fixed_packages
0
url pkg:pypi/bottle@0.11.7
purl pkg:pypi/bottle@0.11.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.7
1
url pkg:pypi/bottle@0.12.6
purl pkg:pypi/bottle@0.12.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.6
Affected_packages
0
url pkg:pypi/bottle@0.11.1
purl pkg:pypi/bottle@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.1
1
url pkg:pypi/bottle@0.11.2
purl pkg:pypi/bottle@0.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.2
2
url pkg:pypi/bottle@0.11.3
purl pkg:pypi/bottle@0.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.3
3
url pkg:pypi/bottle@0.11.4
purl pkg:pypi/bottle@0.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.4
4
url pkg:pypi/bottle@0.11.5
purl pkg:pypi/bottle@0.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.5
5
url pkg:pypi/bottle@0.11.6
purl pkg:pypi/bottle@0.11.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.11.6
6
url pkg:pypi/bottle@0.12.1
purl pkg:pypi/bottle@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.1
7
url pkg:pypi/bottle@0.12.2
purl pkg:pypi/bottle@0.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.2
8
url pkg:pypi/bottle@0.12.3
purl pkg:pypi/bottle@0.12.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.3
9
url pkg:pypi/bottle@0.12.4
purl pkg:pypi/bottle@0.12.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.4
10
url pkg:pypi/bottle@0.12.5
purl pkg:pypi/bottle@0.12.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dww-auab-gbaa
1
vulnerability VCID-6f4p-1f4y-ryag
2
vulnerability VCID-e293-3wep-hqc2
3
vulnerability VCID-ep11-vjnf-cfb5
4
vulnerability VCID-yhx1-tap2-h7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/bottle@0.12.5
References
0
reference_url http://osvdb.org/show/osvdb/106526
reference_id
reference_type
scores
url http://osvdb.org/show/osvdb/106526
1
reference_url https://github.com/defnull/bottle/issues/616
reference_id
reference_type
scores
url https://github.com/defnull/bottle/issues/616
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ep11-vjnf-cfb5