Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-7aky-87dx-nfab
Summary
Apache Continuum and Archiva vulnerable to Cross-site Scripting
Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.
Aliases
0
alias CVE-2011-0533
1
alias GHSA-7382-fv7p-v9v3
Fixed_packages
0
url pkg:maven/org.apache.archiva/archiva@1.3.4
purl pkg:maven/org.apache.archiva/archiva@1.3.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.archiva/archiva@1.3.4
1
url pkg:maven/org.apache.continuum/continuum@1.3.7
purl pkg:maven/org.apache.continuum/continuum@1.3.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.continuum/continuum@1.3.7
Affected_packages
0
url pkg:maven/org.apache.archiva/archiva@1.0
purl pkg:maven/org.apache.archiva/archiva@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7aky-87dx-nfab
1
vulnerability VCID-wz1h-4zzv-8yde
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.archiva/archiva@1.0
References
0
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/65343
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/65343
1
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12581
reference_id
reference_type
scores
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12581
2
reference_url https://web.archive.org/web/20110308092332/http://securitytracker.com/id?1025065
reference_id
reference_type
scores
url https://web.archive.org/web/20110308092332/http://securitytracker.com/id?1025065
3
reference_url https://web.archive.org/web/20111008021907/http://securityreason.com/securityalert/8091
reference_id
reference_type
scores
url https://web.archive.org/web/20111008021907/http://securityreason.com/securityalert/8091
4
reference_url https://web.archive.org/web/20200229160845/http://www.securityfocus.com/bid/46311
reference_id
reference_type
scores
url https://web.archive.org/web/20200229160845/http://www.securityfocus.com/bid/46311
5
reference_url https://web.archive.org/web/20201207190531/http://www.securityfocus.com/archive/1/516342/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20201207190531/http://www.securityfocus.com/archive/1/516342/100/0/threaded
6
reference_url https://web.archive.org/web/20201207190533/http://www.securityfocus.com/archive/1/516474/100/0/threaded
reference_id
reference_type
scores
url https://web.archive.org/web/20201207190533/http://www.securityfocus.com/archive/1/516474/100/0/threaded
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-0533
reference_id CVE-2011-0533
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2011-0533
8
reference_url https://github.com/advisories/GHSA-7382-fv7p-v9v3
reference_id GHSA-7382-fv7p-v9v3
reference_type
scores
url https://github.com/advisories/GHSA-7382-fv7p-v9v3
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-7aky-87dx-nfab