Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-uxa4-6eep-8kh6
Summary
Code Injection
Spring Security OAuth contains a remote code execution vulnerability. A malicious user or attacker can craft an authorization request to the authorization endpoint that can lead to remote code execution when the resource owner is forwarded to the approval endpoint.
Aliases
0
alias CVE-2018-1260
1
alias GHSA-rrpm-pj7p-7j9q
Fixed_packages
0
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
1
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
2
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
3
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
4
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
Affected_packages
0
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-rfwp-tv3x-zqak
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0
1
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
2
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
3
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
4
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
5
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
6
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5
7
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
8
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
9
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
10
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
11
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
12
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
13
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
14
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
15
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
16
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
17
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
18
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
19
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
20
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
21
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
22
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
23
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
24
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
25
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.RELEASE
26
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
27
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
28
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
29
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.RELEASE
30
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
31
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
32
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
33
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.RELEASE
34
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
35
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
36
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
References
0
reference_url https://access.redhat.com/errata/RHSA-2018:1809
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:1809
1
reference_url https://access.redhat.com/errata/RHSA-2018:2939
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2018:2939
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1260.json
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1260.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1260
reference_id
reference_type
scores
0
value 0.52285
scoring_system epss
scoring_elements 0.97979
published_at 2026-06-05T12:55:00Z
1
value 0.52285
scoring_system epss
scoring_elements 0.97976
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1260
4
reference_url https://github.com/advisories/GHSA-rrpm-pj7p-7j9q
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-rrpm-pj7p-7j9q
5
reference_url https://github.com/spring-attic/spring-security-oauth
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/spring-attic/spring-security-oauth
6
reference_url https://github.com/spring-projects/spring-security-oauth/commit/1c6815ac1b26fb2f079adbe283c43a7fd0885f3
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/1c6815ac1b26fb2f079adbe283c43a7fd0885f3
7
reference_url https://github.com/spring-projects/spring-security-oauth/commit/6b1791179c1092553aa0690da22dac4dff2fc58
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/6b1791179c1092553aa0690da22dac4dff2fc58
8
reference_url https://github.com/spring-projects/spring-security-oauth/commit/8e9792c1963f1aeea81ca618785eb8d71d1cd1d
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/8e9792c1963f1aeea81ca618785eb8d71d1cd1d
9
reference_url https://github.com/spring-projects/spring-security-oauth/commit/adb1e6d19c681f394c9513799b81b527b0cb007
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/adb1e6d19c681f394c9513799b81b527b0cb007
10
reference_url https://web.archive.org/web/20200227123539/http://www.securityfocus.com/bid/104158
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227123539/http://www.securityfocus.com/bid/104158
11
reference_url http://www.securityfocus.com/bid/104158
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/104158
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1584376
reference_id 1584376
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1584376
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1260
reference_id CVE-2018-1260
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-1260
14
reference_url https://pivotal.io/security/cve-2018-1260
reference_id CVE-2018-1260
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://pivotal.io/security/cve-2018-1260
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
3
cwe_id 267
name Privilege Defined With Unsafe Actions
description A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
Exploits
Severity_range_score6.3 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-uxa4-6eep-8kh6