Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-jt1t-hxm4-eub3
Summary
OS Command Injection
Akeneo PIM is vulnerable to shell injection in the mass edition, resulting in remote code execution.
Aliases
0
alias CVE-2017-1000009
1
alias GHSA-q8cr-xphm-7gfv
Fixed_packages
0
url pkg:composer/akeneo/pim-community-dev@1.4.28
purl pkg:composer/akeneo/pim-community-dev@1.4.28
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.28
1
url pkg:composer/akeneo/pim-community-dev@1.5.15
purl pkg:composer/akeneo/pim-community-dev@1.5.15
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.15
2
url pkg:composer/akeneo/pim-community-dev@1.6.6
purl pkg:composer/akeneo/pim-community-dev@1.6.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.6
Affected_packages
0
url pkg:composer/akeneo/pim-community-dev@1.4.1
purl pkg:composer/akeneo/pim-community-dev@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.1
1
url pkg:composer/akeneo/pim-community-dev@1.4.10
purl pkg:composer/akeneo/pim-community-dev@1.4.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.10
2
url pkg:composer/akeneo/pim-community-dev@1.4.11
purl pkg:composer/akeneo/pim-community-dev@1.4.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.11
3
url pkg:composer/akeneo/pim-community-dev@1.4.12
purl pkg:composer/akeneo/pim-community-dev@1.4.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.12
4
url pkg:composer/akeneo/pim-community-dev@1.4.13
purl pkg:composer/akeneo/pim-community-dev@1.4.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.13
5
url pkg:composer/akeneo/pim-community-dev@1.4.14
purl pkg:composer/akeneo/pim-community-dev@1.4.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.14
6
url pkg:composer/akeneo/pim-community-dev@1.4.15
purl pkg:composer/akeneo/pim-community-dev@1.4.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.15
7
url pkg:composer/akeneo/pim-community-dev@1.4.16
purl pkg:composer/akeneo/pim-community-dev@1.4.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.16
8
url pkg:composer/akeneo/pim-community-dev@1.4.17
purl pkg:composer/akeneo/pim-community-dev@1.4.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.17
9
url pkg:composer/akeneo/pim-community-dev@1.4.18
purl pkg:composer/akeneo/pim-community-dev@1.4.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.18
10
url pkg:composer/akeneo/pim-community-dev@1.4.19
purl pkg:composer/akeneo/pim-community-dev@1.4.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.19
11
url pkg:composer/akeneo/pim-community-dev@1.4.2
purl pkg:composer/akeneo/pim-community-dev@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.2
12
url pkg:composer/akeneo/pim-community-dev@1.4.20
purl pkg:composer/akeneo/pim-community-dev@1.4.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.20
13
url pkg:composer/akeneo/pim-community-dev@1.4.21
purl pkg:composer/akeneo/pim-community-dev@1.4.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.21
14
url pkg:composer/akeneo/pim-community-dev@1.4.22
purl pkg:composer/akeneo/pim-community-dev@1.4.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.22
15
url pkg:composer/akeneo/pim-community-dev@1.4.23
purl pkg:composer/akeneo/pim-community-dev@1.4.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.23
16
url pkg:composer/akeneo/pim-community-dev@1.4.24
purl pkg:composer/akeneo/pim-community-dev@1.4.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.24
17
url pkg:composer/akeneo/pim-community-dev@1.4.25
purl pkg:composer/akeneo/pim-community-dev@1.4.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.25
18
url pkg:composer/akeneo/pim-community-dev@1.4.26
purl pkg:composer/akeneo/pim-community-dev@1.4.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.26
19
url pkg:composer/akeneo/pim-community-dev@1.4.3
purl pkg:composer/akeneo/pim-community-dev@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.3
20
url pkg:composer/akeneo/pim-community-dev@1.4.4
purl pkg:composer/akeneo/pim-community-dev@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.4
21
url pkg:composer/akeneo/pim-community-dev@1.4.5
purl pkg:composer/akeneo/pim-community-dev@1.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.5
22
url pkg:composer/akeneo/pim-community-dev@1.4.6
purl pkg:composer/akeneo/pim-community-dev@1.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.6
23
url pkg:composer/akeneo/pim-community-dev@1.4.7
purl pkg:composer/akeneo/pim-community-dev@1.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.7
24
url pkg:composer/akeneo/pim-community-dev@1.4.8
purl pkg:composer/akeneo/pim-community-dev@1.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.8
25
url pkg:composer/akeneo/pim-community-dev@1.4.9
purl pkg:composer/akeneo/pim-community-dev@1.4.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.9
26
url pkg:composer/akeneo/pim-community-dev@1.5.1
purl pkg:composer/akeneo/pim-community-dev@1.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.1
27
url pkg:composer/akeneo/pim-community-dev@1.5.10
purl pkg:composer/akeneo/pim-community-dev@1.5.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.10
28
url pkg:composer/akeneo/pim-community-dev@1.5.11
purl pkg:composer/akeneo/pim-community-dev@1.5.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.11
29
url pkg:composer/akeneo/pim-community-dev@1.5.12
purl pkg:composer/akeneo/pim-community-dev@1.5.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.12
30
url pkg:composer/akeneo/pim-community-dev@1.5.13
purl pkg:composer/akeneo/pim-community-dev@1.5.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.13
31
url pkg:composer/akeneo/pim-community-dev@1.5.2
purl pkg:composer/akeneo/pim-community-dev@1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.2
32
url pkg:composer/akeneo/pim-community-dev@1.5.3
purl pkg:composer/akeneo/pim-community-dev@1.5.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.3
33
url pkg:composer/akeneo/pim-community-dev@1.5.4
purl pkg:composer/akeneo/pim-community-dev@1.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.4
34
url pkg:composer/akeneo/pim-community-dev@1.5.5
purl pkg:composer/akeneo/pim-community-dev@1.5.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.5
35
url pkg:composer/akeneo/pim-community-dev@1.5.6
purl pkg:composer/akeneo/pim-community-dev@1.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.6
36
url pkg:composer/akeneo/pim-community-dev@1.5.7
purl pkg:composer/akeneo/pim-community-dev@1.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.7
37
url pkg:composer/akeneo/pim-community-dev@1.5.8
purl pkg:composer/akeneo/pim-community-dev@1.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.8
38
url pkg:composer/akeneo/pim-community-dev@1.5.9
purl pkg:composer/akeneo/pim-community-dev@1.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.9
39
url pkg:composer/akeneo/pim-community-dev@1.6.1
purl pkg:composer/akeneo/pim-community-dev@1.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.1
40
url pkg:composer/akeneo/pim-community-dev@1.6.2
purl pkg:composer/akeneo/pim-community-dev@1.6.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.2
41
url pkg:composer/akeneo/pim-community-dev@1.6.3
purl pkg:composer/akeneo/pim-community-dev@1.6.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.3
42
url pkg:composer/akeneo/pim-community-dev@1.6.4
purl pkg:composer/akeneo/pim-community-dev@1.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.4
43
url pkg:composer/akeneo/pim-community-dev@1.4.0
purl pkg:composer/akeneo/pim-community-dev@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.0
44
url pkg:composer/akeneo/pim-community-dev@1.4.27
purl pkg:composer/akeneo/pim-community-dev@1.4.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.4.27
45
url pkg:composer/akeneo/pim-community-dev@1.5.0
purl pkg:composer/akeneo/pim-community-dev@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.0
46
url pkg:composer/akeneo/pim-community-dev@1.5.14
purl pkg:composer/akeneo/pim-community-dev@1.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.5.14
47
url pkg:composer/akeneo/pim-community-dev@1.6.0
purl pkg:composer/akeneo/pim-community-dev@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.0
48
url pkg:composer/akeneo/pim-community-dev@1.6.5
purl pkg:composer/akeneo/pim-community-dev@1.6.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jt1t-hxm4-eub3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/akeneo/pim-community-dev@1.6.5
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000009
reference_id
reference_type
scores
0
value 0.10457
scoring_system epss
scoring_elements 0.93368
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000009
1
reference_url https://github.com/akeneo/pim-community-dev
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/akeneo/pim-community-dev
2
reference_url https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2
3
reference_url https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes
4
reference_url https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000009
reference_id CVE-2017-1000009
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000009
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-jt1t-hxm4-eub3