Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-3t7n-a654-suhv

Summary

Cross-Site Request Forgery (CSRF)
Cross-site request forgery (CSRF) vulnerability in Jenkins master in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to hijack the authentication of users via unknown vectors.

Aliases

alias	CVE-2013-0327

alias	GHSA-rqhg-cxfr-8xqw

Fixed_packages

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.502
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.502
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.502

Affected_packages

url pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

purl pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3t7n-a654-suhv

vulnerability	VCID-anqd-6ymu-pqhe

vulnerability	VCID-mdu9-gpvt-6bca

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

References

reference_url	http://rhn.redhat.com/errata/RHSA-2013-0638.html
reference_id
reference_type
scores
url	http://rhn.redhat.com/errata/RHSA-2013-0638.html

reference_url	https://access.redhat.com/errata/RHSA-2013:0638
reference_id
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2013:0638

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=914875
reference_id
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=914875

reference_url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
reference_id
reference_type
scores
url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

reference_url	http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
reference_id
reference_type
scores
url	http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb

reference_url	http://www.openwall.com/lists/oss-security/2013/02/21/7
reference_id
reference_type
scores
url	http://www.openwall.com/lists/oss-security/2013/02/21/7

reference_url	https://access.redhat.com/security/cve/CVE-2013-0327
reference_id	CVE-2013-0327
reference_type
scores
url	https://access.redhat.com/security/cve/CVE-2013-0327

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2013-0327
reference_id	CVE-2013-0327
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2013-0327

reference_url	https://github.com/advisories/GHSA-rqhg-cxfr-8xqw
reference_id	GHSA-rqhg-cxfr-8xqw
reference_type
scores
url	https://github.com/advisories/GHSA-rqhg-cxfr-8xqw

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	352
name	Cross-Site Request Forgery (CSRF)
description	The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3t7n-a654-suhv

Vulnerability Instance