GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/38134?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/38134?format=api",
    "vulnerability_id": "VCID-3d8m-wtww-2yah",
    "summary": "Link injection\n`www/logout.php` and `modules/core/www/no_cookie.php` are not checking the URLs obtained via the HTTP request before displaying them as the target of links that the user may click on. It allows attackers to display links targeting a malicious website inside a trusted site running SimpleSAMLphp, due to the lack of security checks involving the `link_href` and `retryURL` HTTP parameters, respectively.",
    "aliases": [
        {
            "alias": "201606-01"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/52749?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-k5d6-k216-8ub8"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.4"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54605?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.12.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-96db-3jav-tkay"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-ugw3-xgan-k3fm"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.12.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204217?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204218?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0-rc2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204219?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.13.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204220?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.13.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204221?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.13.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.13.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204222?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.0-rc1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.0-rc1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/54044?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-jv7n-m3cf-jfex"
                },
                {
                    "vulnerability": "VCID-k5d6-k216-8ub8"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/53258?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-k5d6-k216-8ub8"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204223?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-k5d6-k216-8ub8"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/204224?format=api",
            "purl": "pkg:composer/simplesamlphp/simplesamlphp@1.14.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2etk-v7gt-pqhn"
                },
                {
                    "vulnerability": "VCID-3d8m-wtww-2yah"
                },
                {
                    "vulnerability": "VCID-4gux-4jrc-w7ce"
                },
                {
                    "vulnerability": "VCID-6fwf-1xps-t7g5"
                },
                {
                    "vulnerability": "VCID-b3fn-bnh5-qyg4"
                },
                {
                    "vulnerability": "VCID-cmqz-hp34-8kcx"
                },
                {
                    "vulnerability": "VCID-d1cm-xhdp-8qhv"
                },
                {
                    "vulnerability": "VCID-d1d1-jng1-4fe6"
                },
                {
                    "vulnerability": "VCID-dgs2-3xbu-c3ff"
                },
                {
                    "vulnerability": "VCID-dvwj-zd42-nbhe"
                },
                {
                    "vulnerability": "VCID-gwtm-bdae-3ufj"
                },
                {
                    "vulnerability": "VCID-k5d6-k216-8ub8"
                },
                {
                    "vulnerability": "VCID-mfwu-mfhq-fkh8"
                },
                {
                    "vulnerability": "VCID-pskx-9d46-bfdt"
                },
                {
                    "vulnerability": "VCID-va8h-3qxg-uqh2"
                },
                {
                    "vulnerability": "VCID-yn8q-d76k-q3h2"
                },
                {
                    "vulnerability": "VCID-ywuy-my3f-x7cd"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/simplesamlphp/simplesamlphp@1.14.3"
        }
    ],
    "references": [
        {
            "reference_url": "https://simplesamlphp.org/security/201606-01",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://simplesamlphp.org/security/201606-01"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": "0.5",
    "weighted_severity": "0.0",
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-3d8m-wtww-2yah"
}