GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/40244?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/40244?format=api",
    "vulnerability_id": "VCID-sy7j-en6c-97ey",
    "summary": "Path Traversal\nApache Camel Mail is vulnerable to path traversal.",
    "aliases": [
        {
            "alias": "CVE-2018-8041"
        },
        {
            "alias": "GHSA-jv74-f9pj-xp3f"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56458?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.20.4",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56459?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.21.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.21.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56460?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.22.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.22.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56194?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.20.4",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56660?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.21.2",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.21.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56661?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.22.1",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.22.1"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56453?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.20.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                },
                {
                    "vulnerability": "VCID-u8qd-sxh5-w7bc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56454?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.20.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.20.3"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56455?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.21.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-nk63-z1cj-p3f8"
                },
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                },
                {
                    "vulnerability": "VCID-u8qd-sxh5-w7bc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.21.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56456?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.21.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.21.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56457?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-core@2.22.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-nk63-z1cj-p3f8"
                },
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-core@2.22.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56191?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.20.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                },
                {
                    "vulnerability": "VCID-u8qd-sxh5-w7bc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.20.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56193?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.21.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                },
                {
                    "vulnerability": "VCID-u8qd-sxh5-w7bc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.21.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/56659?format=api",
            "purl": "pkg:maven/org.apache.camel/camel-mail@2.22.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-sy7j-en6c-97ey"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.camel/camel-mail@2.22.0"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2018:3768",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2018:3768"
        },
        {
            "reference_url": "https://issues.apache.org/jira/browse/CAMEL-12630",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://issues.apache.org/jira/browse/CAMEL-12630"
        },
        {
            "reference_url": "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://lists.apache.org/thread.html/2318d7f7d87724d8716cd650c21b31cb06e4d34f6d0f5ee42f28fdaf@%3Ccommits.camel.apache.org%3E"
        },
        {
            "reference_url": "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://lists.apache.org/thread.html/b4014ea7c5830ca1fc28edd5cafedfe93ad4af2d9e69c961c5def31d@%3Ccommits.camel.apache.org%3E"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/105352",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/105352"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8041",
            "reference_id": "CVE-2018-8041",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8041"
        },
        {
            "reference_url": "http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1&modificationDate=1536746339000&api=v2",
            "reference_id": "CVE-2018-8041.TXT.ASC?VERSION=1&MODIFICATIONDATE=1536746339000&API=V2",
            "reference_type": "",
            "scores": [],
            "url": "http://camel.apache.org/security-advisories.data/CVE-2018-8041.txt.asc?version=1&modificationDate=1536746339000&api=v2"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-jv74-f9pj-xp3f",
            "reference_id": "GHSA-jv74-f9pj-xp3f",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/advisories/GHSA-jv74-f9pj-xp3f"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 22,
            "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
            "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 352,
            "name": "Cross-Site Request Forgery (CSRF)",
            "description": "The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request."
        }
    ],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sy7j-en6c-97ey"
}