Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zgda-rtpk-bfbr
Summary
Improper Input Validation
An attacker that forces an error can crash the server, causing a denial of service.
Aliases
0
alias CVE-2017-16014
Fixed_packages
0
url pkg:npm/http-proxy@0.7.0
purl pkg:npm/http-proxy@0.7.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/http-proxy@0.7.0
Affected_packages
References
0
reference_url https://github.com/nodejitsu/node-http-proxy/pull/101
reference_id
reference_type
scores
url https://github.com/nodejitsu/node-http-proxy/pull/101
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-16014
reference_id CVE-2017-16014
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-16014
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 388
name 7PK - Errors
description This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability classification. It includes weaknesses that occur when an application does not properly handle errors that occur during processing. According to the authors of the Seven Pernicious Kingdoms, "Errors and error handling represent a class of API. Errors related to error handling are so common that they deserve a special kingdom of their own. As with 'API Abuse,' there are two ways to introduce an error-related security vulnerability: the most common one is handling errors poorly (or not at all). The second is producing errors that either give out too much information (to possible attackers) or are difficult to handle."
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zgda-rtpk-bfbr