Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5yj1-mccu-mubp
SummaryIn Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10 and Splunk Cloud Platform versions below 9.1.2312.200 and 9.1.2308.207, an authenticated user could run risky commands using the permissions of a higher-privileged user to bypass SPL safeguards for risky commands in the Analytics Workspace. The vulnerability requires the authenticated user to phish the victim by tricking them into initiating a request within their browser. The authenticated user should not be able to exploit the vulnerability at will.
Aliases
0
alias CVE-2024-36986
Fixed_packages
Affected_packages
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-36986
reference_id
reference_type
scores
0
value 0.00293
scoring_system epss
scoring_elements 0.53026
published_at 2026-06-11T12:55:00Z
1
value 0.00293
scoring_system epss
scoring_elements 0.53154
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-36986
1
reference_url https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/
reference_id 1cf58ae1-9177-40b8-a26c-8966040f11ae
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-02T20:10:45Z/
url https://research.splunk.com/application/1cf58ae1-9177-40b8-a26c-8966040f11ae/
2
reference_url https://advisory.splunk.com/advisories/SVD-2024-0706
reference_id SVD-2024-0706
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-02T20:10:45Z/
url https://advisory.splunk.com/advisories/SVD-2024-0706
Weaknesses
0
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploits
Severity_range_score6.3 - 6.3
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5yj1-mccu-mubp