Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zvtm-9bd5-ufgy
Summary
XSS Vulnerability
CKEditor, a third-party JavaScript library included in Drupal core, is affected by a cross-site scripting (XSS) vulnerability. It's possible to execute XSS inside CKEditor when using the `image2` plugin.
Aliases
0
alias SA-CORE-2018-003
Fixed_packages
0
url pkg:composer/drupal/core@8.4.7
purl pkg:composer/drupal/core@8.4.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.4.7
1
url pkg:composer/drupal/core@8.5.2
purl pkg:composer/drupal/core@8.5.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.5.2
2
url pkg:composer/drupal/drupal@8.4.7
purl pkg:composer/drupal/drupal@8.4.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.4.7
3
url pkg:composer/drupal/drupal@8.5.2
purl pkg:composer/drupal/drupal@8.5.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.5.2
Affected_packages
0
url pkg:composer/drupal/core@8.5.0-alpha0
purl pkg:composer/drupal/core@8.5.0-alpha0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zvtm-9bd5-ufgy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.5.0-alpha0
1
url pkg:composer/drupal/drupal@8.5.0-alpha0
purl pkg:composer/drupal/drupal@8.5.0-alpha0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-zvtm-9bd5-ufgy
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.5.0-alpha0
References
0
reference_url https://www.drupal.org/sa-core-2018-003
reference_id
reference_type
scores
url https://www.drupal.org/sa-core-2018-003
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zvtm-9bd5-ufgy