Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-u95s-xhwk-vka6
Summary
Insufficient Verification of Data Authenticity
The CORS Filter in Apache Tomcat did not add an HTTP Vary header indicating that the response varies depending on Origin. This permitted client and server side cache poisoning in some circumstances.
Aliases
0
alias CVE-2017-7674
Fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.79
purl pkg:maven/org.apache.tomcat/tomcat@7.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q1cf-qg1v-3ybr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.79
1
url pkg:maven/org.apache.tomcat/tomcat@8.0.45
purl pkg:maven/org.apache.tomcat/tomcat@8.0.45
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q1cf-qg1v-3ybr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.45
2
url pkg:maven/org.apache.tomcat/tomcat@8.5.16
purl pkg:maven/org.apache.tomcat/tomcat@8.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q1cf-qg1v-3ybr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.16
3
url pkg:maven/org.apache.tomcat/tomcat@9.0.1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q1cf-qg1v-3ybr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.1
4
url pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.79
purl pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.79
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8fn4-hnez-y3eb
1
vulnerability VCID-et9y-m4hb-43h7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.79
5
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.16
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.16
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.16
6
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M22
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M22
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M22
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.41
purl pkg:maven/org.apache.tomcat/tomcat@7.0.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q7g1-m4e7-pya4
1
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.41
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.50
purl pkg:maven/org.apache.tomcat/tomcat@7.0.50
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3txt-1psa-5kf5
1
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.50
2
url pkg:maven/org.apache.tomcat/tomcat@7.0.52
purl pkg:maven/org.apache.tomcat/tomcat@7.0.52
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.52
3
url pkg:maven/org.apache.tomcat/tomcat@7.0.78
purl pkg:maven/org.apache.tomcat/tomcat@7.0.78
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.78
4
url pkg:maven/org.apache.tomcat/tomcat@8.0
purl pkg:maven/org.apache.tomcat/tomcat@8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0
5
url pkg:maven/org.apache.tomcat/tomcat@8.0.44
purl pkg:maven/org.apache.tomcat/tomcat@8.0.44
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.44
6
url pkg:maven/org.apache.tomcat/tomcat@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-3nsr-9s9y-ckft
2
vulnerability VCID-4nx6-t8vd-bqcu
3
vulnerability VCID-59dd-qzpt-aucm
4
vulnerability VCID-6umz-z8db-kqcy
5
vulnerability VCID-dast-z2hv-2yfe
6
vulnerability VCID-dbu6-fhrs-aubn
7
vulnerability VCID-dk58-p9py-rka9
8
vulnerability VCID-g3vd-74yh-s7bn
9
vulnerability VCID-gmjm-6ck2-skgu
10
vulnerability VCID-hqzu-shyu-j3hp
11
vulnerability VCID-jzta-navk-87bn
12
vulnerability VCID-kqng-d1f2-myg5
13
vulnerability VCID-nxb3-55eu-auhp
14
vulnerability VCID-q7g1-m4e7-pya4
15
vulnerability VCID-qth9-7326-hffp
16
vulnerability VCID-rk89-9dw5-w3gg
17
vulnerability VCID-rtmv-qetu-yqfa
18
vulnerability VCID-s37s-p75k-27e6
19
vulnerability VCID-se44-f85s-xyex
20
vulnerability VCID-tcmv-6ftg-fqen
21
vulnerability VCID-u95s-xhwk-vka6
22
vulnerability VCID-vu84-dfwa-z3dg
23
vulnerability VCID-wmb3-3j7y-due7
24
vulnerability VCID-xns8-63b5-guf2
25
vulnerability VCID-y9hs-ymcm-3ucx
26
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.0
7
url pkg:maven/org.apache.tomcat/tomcat@8.5.15
purl pkg:maven/org.apache.tomcat/tomcat@8.5.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dast-z2hv-2yfe
1
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.15
8
url pkg:maven/org.apache.tomcat/tomcat@9.0.0
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-59dd-qzpt-aucm
1
vulnerability VCID-8xdc-3kn9-b3e6
2
vulnerability VCID-dbu6-fhrs-aubn
3
vulnerability VCID-dk58-p9py-rka9
4
vulnerability VCID-fqyx-8pgs-uqgg
5
vulnerability VCID-g3vd-74yh-s7bn
6
vulnerability VCID-nxb3-55eu-auhp
7
vulnerability VCID-q1cf-qg1v-3ybr
8
vulnerability VCID-q7g1-m4e7-pya4
9
vulnerability VCID-qth9-7326-hffp
10
vulnerability VCID-rtmv-qetu-yqfa
11
vulnerability VCID-u95s-xhwk-vka6
12
vulnerability VCID-vu84-dfwa-z3dg
13
vulnerability VCID-wmb3-3j7y-due7
14
vulnerability VCID-xns8-63b5-guf2
15
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0
9
url pkg:maven/org.apache.tomcat/tomcat-catalina@7
purl pkg:maven/org.apache.tomcat/tomcat-catalina@7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@7
10
url pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.78
purl pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.78
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@7.0.78
11
url pkg:maven/org.apache.tomcat/tomcat-catalina@8
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8
12
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.44
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.44
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.0.44
13
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5
14
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.15
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.15
15
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M21
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-u95s-xhwk-vka6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M21
16
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6umz-z8db-kqcy
1
vulnerability VCID-7fh9-36qs-jfg5
2
vulnerability VCID-jzta-navk-87bn
3
vulnerability VCID-u95s-xhwk-vka6
4
vulnerability VCID-xa95-zsnk-3kg9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.0.M1
References
0
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1480618
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1480618
1
reference_url https://lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f@%3Cannounce.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/22b4bb077502f847e2b9fcf00b96e81e734466ab459780ff73b60c0f@%3Cannounce.tomcat.apache.org%3E
2
reference_url https://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-7.html
3
reference_url https://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-8.html
4
reference_url http://www.securityfocus.com/bid/100280
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/100280
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7674
reference_id CVE-2017-7674
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-7674
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 345
name Insufficient Verification of Data Authenticity
description The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-u95s-xhwk-vka6