Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-pbvw-fs16-67bq
Summary
Improper Privilege Management
Spring Security OAuth are susceptible to a privilege escalation under certain conditions. A malicious user or attacker can craft a request to the approval endpoint that can modify the previously saved authorization request and lead to a privilege escalation on the subsequent approval.
Aliases
0
alias CVE-2018-15758
1
alias GHSA-h8w4-qv99-f7vj
Fixed_packages
0
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.16.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.16.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.16.RELEASE
1
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.3.RELEASE
2
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.3.RELEASE
3
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.4.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.4.RELEASE
Affected_packages
0
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.0.RELEASE
1
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.1.RELEASE
2
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.2.RELEASE
3
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.3.RELEASE
4
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.4.RELEASE
5
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-pbvw-fs16-67bq
1
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@1.0.5.RELEASE
6
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0
7
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.0.RELEASE
8
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.1.RELEASE
9
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.2.RELEASE
10
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.3.RELEASE
11
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.4.RELEASE
12
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.5.RELEASE
13
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.6.RELEASE
14
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.7.RELEASE
15
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rfwp-tv3x-zqak
3
vulnerability VCID-rqmm-31xc-eqfp
4
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.8.RELEASE
16
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.9.RELEASE
17
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.10.RELEASE
18
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.11.RELEASE
19
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.12.RELEASE
20
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.13.RELEASE
21
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.14.RELEASE
22
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.0.15.RELEASE
23
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0
24
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.0.RELEASE
25
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.1.RELEASE
26
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.1.2.RELEASE
27
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0
28
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.0.RELEASE
29
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.1.RELEASE
30
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.2.2.RELEASE
31
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0
32
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.0.RELEASE
33
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.1.RELEASE
34
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
3
vulnerability VCID-uxa4-6eep-8kh6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.2.RELEASE
35
url pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
purl pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ndm-y1m9-3feg
1
vulnerability VCID-pbvw-fs16-67bq
2
vulnerability VCID-rqmm-31xc-eqfp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.3.3.RELEASE
References
0
reference_url https://access.redhat.com/errata/RHSA-2019:2413
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2019:2413
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15758.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15758.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15758
reference_id
reference_type
scores
0
value 0.00326
scoring_system epss
scoring_elements 0.55923
published_at 2026-06-05T12:55:00Z
1
value 0.00326
scoring_system epss
scoring_elements 0.55867
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15758
3
reference_url https://github.com/advisories/GHSA-h8w4-qv99-f7vj
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-h8w4-qv99-f7vj
4
reference_url https://github.com/spring-attic/spring-security-oauth/commit/4082ec7ae3d39198a47b5c803ccb20dacefb0b0
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-attic/spring-security-oauth/commit/4082ec7ae3d39198a47b5c803ccb20dacefb0b0
5
reference_url https://github.com/spring-attic/spring-security-oauth/commit/623776689fdcc8047f5a908c71f348e1f172a97
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-attic/spring-security-oauth/commit/623776689fdcc8047f5a908c71f348e1f172a97
6
reference_url https://github.com/spring-attic/spring-security-oauth/commit/ddd65cd9417ae1e4a69e4193a622300db38e2ef
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-attic/spring-security-oauth/commit/ddd65cd9417ae1e4a69e4193a622300db38e2ef
7
reference_url https://github.com/spring-attic/spring-security-oauth/commit/f92223afc71687bd3156298054903f50aa71fbf
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-attic/spring-security-oauth/commit/f92223afc71687bd3156298054903f50aa71fbf
8
reference_url https://github.com/spring-projects/spring-security-oauth/commit/4082ec7ae3d39198a47b5c803ccb20dacefb0b0
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/4082ec7ae3d39198a47b5c803ccb20dacefb0b0
9
reference_url https://github.com/spring-projects/spring-security-oauth/commit/623776689fdcc8047f5a908c71f348e1f172a97
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/623776689fdcc8047f5a908c71f348e1f172a97
10
reference_url https://github.com/spring-projects/spring-security-oauth/commit/ddd65cd9417ae1e4a69e4193a622300db38e2ef
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/ddd65cd9417ae1e4a69e4193a622300db38e2ef
11
reference_url https://github.com/spring-projects/spring-security-oauth/commit/f92223afc71687bd3156298054903f50aa71fbf
reference_id
reference_type
scores
url https://github.com/spring-projects/spring-security-oauth/commit/f92223afc71687bd3156298054903f50aa71fbf
12
reference_url http://www.securityfocus.com/bid/105687
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105687
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1643048
reference_id 1643048
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1643048
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-15758
reference_id CVE-2018-15758
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-15758
15
reference_url https://pivotal.io/security/cve-2018-15758
reference_id CVE-2018-15758
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://pivotal.io/security/cve-2018-15758
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 269
name Improper Privilege Management
description The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
3
cwe_id 285
name Improper Authorization
description The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-pbvw-fs16-67bq