Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wezb-6dbp-nfer
Summary
Cross-site Scripting
In Bootstrap, XSS is possible in the collapse data-parent attribute.
Aliases
0
alias CVE-2018-14040
1
alias GHSA-3wqf-4x89-9g79
Fixed_packages
0
url pkg:composer/twbs/bootstrap@3.4.0
purl pkg:composer/twbs/bootstrap@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twbs/bootstrap@3.4.0
1
url pkg:composer/twbs/bootstrap@4.1.2
purl pkg:composer/twbs/bootstrap@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twbs/bootstrap@4.1.2
2
url pkg:gem/bootstrap@4.1.2
purl pkg:gem/bootstrap@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/bootstrap@4.1.2
3
url pkg:gem/bootstrap-sass@3.4.0
purl pkg:gem/bootstrap-sass@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/bootstrap-sass@3.4.0
4
url pkg:maven/org.webjars/bootstrap@3.4.0
purl pkg:maven/org.webjars/bootstrap@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.webjars/bootstrap@3.4.0
5
url pkg:maven/org.webjars/bootstrap@4.1.2
purl pkg:maven/org.webjars/bootstrap@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.webjars/bootstrap@4.1.2
6
url pkg:npm/bootstrap@3.4.0
purl pkg:npm/bootstrap@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/bootstrap@3.4.0
7
url pkg:npm/bootstrap@4.1.2
purl pkg:npm/bootstrap@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/bootstrap@4.1.2
8
url pkg:nuget/bootstrap@3.4.0
purl pkg:nuget/bootstrap@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap@3.4.0
9
url pkg:nuget/bootstrap@4.1.2
purl pkg:nuget/bootstrap@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap@4.1.2
10
url pkg:nuget/Bootstrap.Less@3.4.0
purl pkg:nuget/Bootstrap.Less@3.4.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Bootstrap.Less@3.4.0
11
url pkg:nuget/bootstrap.sass@4.1.2
purl pkg:nuget/bootstrap.sass@4.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap.sass@4.1.2
Affected_packages
0
url pkg:composer/twbs/bootstrap@2.3.0
purl pkg:composer/twbs/bootstrap@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-vsty-6vqf-pkeg
1
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twbs/bootstrap@2.3.0
1
url pkg:composer/twbs/bootstrap@4.0.0
purl pkg:composer/twbs/bootstrap@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4wt8-wyvc-1uca
1
vulnerability VCID-7ch1-q9f4-a7bt
2
vulnerability VCID-vsty-6vqf-pkeg
3
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/twbs/bootstrap@4.0.0
2
url pkg:gem/bootstrap@4.0.0
purl pkg:gem/bootstrap@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ch1-q9f4-a7bt
1
vulnerability VCID-vsty-6vqf-pkeg
2
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/bootstrap@4.0.0
3
url pkg:gem/bootstrap-sass@2.3.0
purl pkg:gem/bootstrap-sass@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-vsty-6vqf-pkeg
1
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/bootstrap-sass@2.3.0
4
url pkg:npm/bootstrap@4.0.0
purl pkg:npm/bootstrap@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4wt8-wyvc-1uca
1
vulnerability VCID-7ch1-q9f4-a7bt
2
vulnerability VCID-vsty-6vqf-pkeg
3
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/bootstrap@4.0.0
5
url pkg:nuget/bootstrap@2.3.0
purl pkg:nuget/bootstrap@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap@2.3.0
6
url pkg:nuget/bootstrap@4.0.0
purl pkg:nuget/bootstrap@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ch1-q9f4-a7bt
1
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap@4.0.0
7
url pkg:nuget/bootstrap.sass@4.0.0
purl pkg:nuget/bootstrap.sass@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ch1-q9f4-a7bt
1
vulnerability VCID-vsty-6vqf-pkeg
2
vulnerability VCID-wezb-6dbp-nfer
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/bootstrap.sass@4.0.0
References
0
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
reference_id
reference_type
scores
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2
1
reference_url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
reference_id
reference_type
scores
url https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
2
reference_url https://github.com/twbs/bootstrap/blob/v3.4.1/js/collapse.js#L140
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/blob/v3.4.1/js/collapse.js#L140
3
reference_url https://github.com/twbs/bootstrap/blob/v3.4.1/js/scrollspy.js#L56
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/blob/v3.4.1/js/scrollspy.js#L56
4
reference_url https://github.com/twbs/bootstrap/blob/v3.4.1/js/tooltip.js#L352
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/blob/v3.4.1/js/tooltip.js#L352
5
reference_url https://github.com/twbs/bootstrap/commit/149096016f70fd815540d62c0989fd99cdc809e0
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/commit/149096016f70fd815540d62c0989fd99cdc809e0
6
reference_url https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/commit/2a5ba23ce8f041f3548317acc992ed8a736b609d
7
reference_url https://github.com/twbs/bootstrap/issues/26423
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/issues/26423
8
reference_url https://github.com/twbs/bootstrap/issues/26625
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/issues/26625
9
reference_url https://github.com/twbs/bootstrap/pull/26630
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap/pull/26630
10
reference_url https://github.com/twbs/bootstrap-rubygem/commit/f34c43c936ac7d0ebb129289321d8c51cd56aed1#diff-4e736e880b7fc39eb5e85576b629f6e3cd08f02f45104a7b4581f82852e97a81R1306
reference_id
reference_type
scores
url https://github.com/twbs/bootstrap-rubygem/commit/f34c43c936ac7d0ebb129289321d8c51cd56aed1#diff-4e736e880b7fc39eb5e85576b629f6e3cd08f02f45104a7b4581f82852e97a81R1306
11
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/52e0e6b5df827ee7f1e68f7cc3babe61af3b2160f5d74a85469b7b0e@%3Cdev.superset.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r3dc0cac8d856bca02bd6997355d7ff83027dcfc82f8646a29b89b714@%3Cissues.hbase.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
17
reference_url https://lists.debian.org/debian-lts-announce/2018/08/msg00027.html
reference_id
reference_type
scores
url https://lists.debian.org/debian-lts-announce/2018/08/msg00027.html
18
reference_url https://seclists.org/bugtraq/2019/May/18
reference_id
reference_type
scores
url https://seclists.org/bugtraq/2019/May/18
19
reference_url https://www.oracle.com/security-alerts/cpuApr2021.html
reference_id
reference_type
scores
url https://www.oracle.com/security-alerts/cpuApr2021.html
20
reference_url https://www.tenable.com/security/tns-2021-14
reference_id
reference_type
scores
url https://www.tenable.com/security/tns-2021-14
21
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-14040
reference_id CVE-2018-14040
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-14040
22
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14040.yml
reference_id CVE-2018-14040.YML
reference_type
scores
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap/CVE-2018-14040.yml
23
reference_url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2018-14040.yml
reference_id CVE-2018-14040.YML
reference_type
scores
url https://github.com/rubysec/ruby-advisory-db/blob/master/gems/bootstrap-sass/CVE-2018-14040.yml
24
reference_url https://github.com/advisories/GHSA-3wqf-4x89-9g79
reference_id GHSA-3wqf-4x89-9g79
reference_type
scores
url https://github.com/advisories/GHSA-3wqf-4x89-9g79
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wezb-6dbp-nfer