Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-6fge-cvwc-bbgc

Summary

XXE in Apache Camel
Multiple XML external entity (XXE) vulnerabilities in `builder/xml/XPathBuilder.java` in this package allow remote attackers to read arbitrary files via an external entity in an invalid XML String or GenericFile object in an XPath query.

Aliases

alias	CVE-2015-0264

Fixed_packages

url	pkg:maven/org.apache.camel/camel-core@2.13.4
purl	pkg:maven/org.apache.camel/camel-core@2.13.4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.13.4

url	pkg:maven/org.apache.camel/camel-core@2.14.2
purl	pkg:maven/org.apache.camel/camel-core@2.14.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.14.2

Affected_packages

url pkg:maven/org.apache.camel/camel-core@2.13.3

purl pkg:maven/org.apache.camel/camel-core@2.13.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6fge-cvwc-bbgc

vulnerability	VCID-caw1-1xnz-yufc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.13.3

url pkg:maven/org.apache.camel/camel-core@2.14-alpha0

purl pkg:maven/org.apache.camel/camel-core@2.14-alpha0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6fge-cvwc-bbgc

vulnerability	VCID-caw1-1xnz-yufc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.14-alpha0

url pkg:maven/org.apache.camel/camel-core@2.14.1

purl pkg:maven/org.apache.camel/camel-core@2.14.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6fge-cvwc-bbgc

vulnerability	VCID-caw1-1xnz-yufc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.14.1

References

reference_url	http://camel.apache.org/security-advisories.html
reference_id
reference_type
scores
url	http://camel.apache.org/security-advisories.html

reference_url	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0264
reference_id
reference_type
scores
url	https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0264

reference_url	https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc?version=1&modificationDate=1426539191000&api=v2
reference_id	CVE-2015-0264.TXT.ASC?VERSION=1&MODIFICATIONDATE=1426539191000&API=V2
reference_type
scores
url	https://camel.apache.org/security-advisories.data/CVE-2015-0264.txt.asc?version=1&modificationDate=1426539191000&api=v2

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fge-cvwc-bbgc

Vulnerability Instance