Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d2ab-j8bf-e7dx
Summary
Magento Open Source allows XML Injection
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Aliases
0
alias CVE-2023-22247
1
alias GHSA-2444-8gj8-6fmx
Fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p3
purl pkg:composer/magento/community-edition@2.4.4-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p3
1
url pkg:composer/magento/community-edition@2.4.5-p2
purl pkg:composer/magento/community-edition@2.4.5-p2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p2
Affected_packages
0
url pkg:composer/magento/community-edition@2.4.4-p1
purl pkg:composer/magento/community-edition@2.4.4-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2h52-3pt6-dfcw
1
vulnerability VCID-3et4-3zad-1qfn
2
vulnerability VCID-525q-afzj-tkcp
3
vulnerability VCID-5wfa-wpby-dke1
4
vulnerability VCID-6t9w-cnkz-s3c3
5
vulnerability VCID-7ewa-w75h-qfdy
6
vulnerability VCID-7hrm-jtbx-sqgm
7
vulnerability VCID-7s7e-adr6-h3dc
8
vulnerability VCID-8msu-s38a-p7e3
9
vulnerability VCID-9cc9-npdc-8bac
10
vulnerability VCID-a8gs-ervm-e3hm
11
vulnerability VCID-agtm-nkhp-dkdn
12
vulnerability VCID-az2w-5xhy-5fe4
13
vulnerability VCID-b4jg-dj1a-9qd5
14
vulnerability VCID-cc8x-6es1-8kc5
15
vulnerability VCID-cgwk-hn4t-n7c1
16
vulnerability VCID-d2ab-j8bf-e7dx
17
vulnerability VCID-dpgz-dacm-sqg6
18
vulnerability VCID-dx43-89w9-a7dg
19
vulnerability VCID-e9zx-zy9y-2fcp
20
vulnerability VCID-fzam-yuyg-qyd5
21
vulnerability VCID-hh8a-mgkk-3yb5
22
vulnerability VCID-j124-q39m-mkby
23
vulnerability VCID-j5vp-2jrx-ukf4
24
vulnerability VCID-jhd5-tqph-3ufu
25
vulnerability VCID-kxnm-y19k-mqg2
26
vulnerability VCID-m5z8-hz81-j7b7
27
vulnerability VCID-m83v-51cy-uqar
28
vulnerability VCID-msac-ptqf-pyg1
29
vulnerability VCID-mtr5-suag-2bdj
30
vulnerability VCID-p222-28c1-vfhy
31
vulnerability VCID-qfw5-3tdu-x7g4
32
vulnerability VCID-qj4x-u7gx-9uf1
33
vulnerability VCID-r7nh-arcj-8fb3
34
vulnerability VCID-rbjk-3gcs-2qb5
35
vulnerability VCID-rf6p-ct86-5bgz
36
vulnerability VCID-ruru-fwmn-5kes
37
vulnerability VCID-s5e2-d6n8-kkbr
38
vulnerability VCID-upcj-z3c1-ubcf
39
vulnerability VCID-w3zd-fezc-nuhd
40
vulnerability VCID-wjfe-wh5k-1qft
41
vulnerability VCID-ws6y-k3tx-r3gb
42
vulnerability VCID-x46d-a16g-nkg9
43
vulnerability VCID-y4r1-yr69-uuf6
44
vulnerability VCID-yuvf-e7hk-kqf9
45
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p1
1
url pkg:composer/magento/community-edition@2.4.4
purl pkg:composer/magento/community-edition@2.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2h52-3pt6-dfcw
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3et4-3zad-1qfn
3
vulnerability VCID-3zcy-b3th-ukhd
4
vulnerability VCID-525q-afzj-tkcp
5
vulnerability VCID-5gxr-xksz-5ydb
6
vulnerability VCID-6t9w-cnkz-s3c3
7
vulnerability VCID-6tx4-wexr-fkbb
8
vulnerability VCID-7ewa-w75h-qfdy
9
vulnerability VCID-7hrm-jtbx-sqgm
10
vulnerability VCID-7pr7-uqp1-sugt
11
vulnerability VCID-7s3w-8dn6-jqh7
12
vulnerability VCID-7s7e-adr6-h3dc
13
vulnerability VCID-8hx4-r8bb-n7ge
14
vulnerability VCID-8ky6-w2nk-9bds
15
vulnerability VCID-8msu-s38a-p7e3
16
vulnerability VCID-8shb-t5zp-rqbu
17
vulnerability VCID-9cc9-npdc-8bac
18
vulnerability VCID-9vrt-uccb-myev
19
vulnerability VCID-a8gs-ervm-e3hm
20
vulnerability VCID-a9b6-tenb-afdw
21
vulnerability VCID-agtm-nkhp-dkdn
22
vulnerability VCID-ayfe-5a7g-u7b7
23
vulnerability VCID-az2w-5xhy-5fe4
24
vulnerability VCID-b3cn-pjp3-4yhm
25
vulnerability VCID-b4jg-dj1a-9qd5
26
vulnerability VCID-b9ry-u6qy-j7cc
27
vulnerability VCID-bch8-kq49-skhm
28
vulnerability VCID-bera-73sm-bbh7
29
vulnerability VCID-bkpz-ratd-e7ab
30
vulnerability VCID-bzyh-c5tm-j7dn
31
vulnerability VCID-cc8x-6es1-8kc5
32
vulnerability VCID-cgwk-hn4t-n7c1
33
vulnerability VCID-cqjn-3z6n-sff1
34
vulnerability VCID-d2ab-j8bf-e7dx
35
vulnerability VCID-d6mk-hg8h-7qbc
36
vulnerability VCID-dpgz-dacm-sqg6
37
vulnerability VCID-dpm5-tmsy-2bez
38
vulnerability VCID-du16-f2wp-t3cw
39
vulnerability VCID-dur2-pfke-h7hf
40
vulnerability VCID-dx43-89w9-a7dg
41
vulnerability VCID-e7zd-dn28-4bf1
42
vulnerability VCID-e9zx-zy9y-2fcp
43
vulnerability VCID-eahe-s41f-ckc1
44
vulnerability VCID-egy6-nku7-zyap
45
vulnerability VCID-evth-swm9-k3de
46
vulnerability VCID-fz5y-um7w-63f4
47
vulnerability VCID-fzam-yuyg-qyd5
48
vulnerability VCID-gedj-39p5-ubd6
49
vulnerability VCID-gxj9-a1hc-47de
50
vulnerability VCID-hbau-7tvg-cygz
51
vulnerability VCID-hfbb-ax6r-tbaz
52
vulnerability VCID-hh8a-mgkk-3yb5
53
vulnerability VCID-hq7k-qz7g-4bc2
54
vulnerability VCID-j124-q39m-mkby
55
vulnerability VCID-j5vp-2jrx-ukf4
56
vulnerability VCID-j6ss-8f4e-e7g2
57
vulnerability VCID-jhd5-tqph-3ufu
58
vulnerability VCID-kezx-5nw5-hfen
59
vulnerability VCID-kje4-asu6-dfg2
60
vulnerability VCID-kq4m-anrt-rugn
61
vulnerability VCID-kuzc-uv5b-v7an
62
vulnerability VCID-kxnm-y19k-mqg2
63
vulnerability VCID-m5z8-hz81-j7b7
64
vulnerability VCID-m83v-51cy-uqar
65
vulnerability VCID-mhvf-2keh-2qar
66
vulnerability VCID-mjb6-7au8-5fdx
67
vulnerability VCID-msac-ptqf-pyg1
68
vulnerability VCID-mtr5-suag-2bdj
69
vulnerability VCID-ns8t-vtcn-aqh4
70
vulnerability VCID-p222-28c1-vfhy
71
vulnerability VCID-qfw5-3tdu-x7g4
72
vulnerability VCID-qgpx-hgzu-5qgp
73
vulnerability VCID-qj4x-u7gx-9uf1
74
vulnerability VCID-qp7s-amch-v3cd
75
vulnerability VCID-qzqd-271b-ybfj
76
vulnerability VCID-r4bw-w4t9-23ek
77
vulnerability VCID-r7nh-arcj-8fb3
78
vulnerability VCID-rbjk-3gcs-2qb5
79
vulnerability VCID-rduw-apr6-4fdu
80
vulnerability VCID-re84-qg3k-3ub3
81
vulnerability VCID-rf6p-ct86-5bgz
82
vulnerability VCID-ruru-fwmn-5kes
83
vulnerability VCID-rxac-w9pd-aqe1
84
vulnerability VCID-s4bp-kzfu-8qfy
85
vulnerability VCID-s5e2-d6n8-kkbr
86
vulnerability VCID-scg7-ugdn-53b9
87
vulnerability VCID-shfz-pxan-v3ar
88
vulnerability VCID-te3b-exz5-zke1
89
vulnerability VCID-tvz9-8s4d-gbg6
90
vulnerability VCID-txb3-ez5r-r7ek
91
vulnerability VCID-ugyc-gehq-rudu
92
vulnerability VCID-upcj-z3c1-ubcf
93
vulnerability VCID-vu36-a1g1-nugt
94
vulnerability VCID-vx13-4b1d-wbgp
95
vulnerability VCID-w3zd-fezc-nuhd
96
vulnerability VCID-wjfe-wh5k-1qft
97
vulnerability VCID-ws6y-k3tx-r3gb
98
vulnerability VCID-wvyx-2bbb-9yf7
99
vulnerability VCID-x46d-a16g-nkg9
100
vulnerability VCID-xfvu-2zg4-ruf6
101
vulnerability VCID-xk5y-7a1w-zba9
102
vulnerability VCID-xsq8-ztqh-ubb8
103
vulnerability VCID-y1v3-9tyq-uqhd
104
vulnerability VCID-y4r1-yr69-uuf6
105
vulnerability VCID-y4u6-cy8y-hyae
106
vulnerability VCID-y7x4-664r-3fbk
107
vulnerability VCID-yuvf-e7hk-kqf9
108
vulnerability VCID-z2v2-n138-6ydv
109
vulnerability VCID-zdpz-8tc2-6kah
110
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4
2
url pkg:composer/magento/community-edition@2.4.5-p1
purl pkg:composer/magento/community-edition@2.4.5-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2h52-3pt6-dfcw
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3et4-3zad-1qfn
3
vulnerability VCID-3zcy-b3th-ukhd
4
vulnerability VCID-525q-afzj-tkcp
5
vulnerability VCID-5gxr-xksz-5ydb
6
vulnerability VCID-6t9w-cnkz-s3c3
7
vulnerability VCID-6tx4-wexr-fkbb
8
vulnerability VCID-7ewa-w75h-qfdy
9
vulnerability VCID-7hrm-jtbx-sqgm
10
vulnerability VCID-7pr7-uqp1-sugt
11
vulnerability VCID-7s3w-8dn6-jqh7
12
vulnerability VCID-7s74-rdkp-vyaf
13
vulnerability VCID-7s7e-adr6-h3dc
14
vulnerability VCID-8hx4-r8bb-n7ge
15
vulnerability VCID-8ky6-w2nk-9bds
16
vulnerability VCID-8msu-s38a-p7e3
17
vulnerability VCID-8shb-t5zp-rqbu
18
vulnerability VCID-9cc9-npdc-8bac
19
vulnerability VCID-9vrt-uccb-myev
20
vulnerability VCID-a8gs-ervm-e3hm
21
vulnerability VCID-a9b6-tenb-afdw
22
vulnerability VCID-agtm-nkhp-dkdn
23
vulnerability VCID-ayfe-5a7g-u7b7
24
vulnerability VCID-az2w-5xhy-5fe4
25
vulnerability VCID-b3cn-pjp3-4yhm
26
vulnerability VCID-b4jg-dj1a-9qd5
27
vulnerability VCID-b9ry-u6qy-j7cc
28
vulnerability VCID-bch8-kq49-skhm
29
vulnerability VCID-bera-73sm-bbh7
30
vulnerability VCID-bkpz-ratd-e7ab
31
vulnerability VCID-bzyh-c5tm-j7dn
32
vulnerability VCID-cc8x-6es1-8kc5
33
vulnerability VCID-cgwk-hn4t-n7c1
34
vulnerability VCID-cqjn-3z6n-sff1
35
vulnerability VCID-d2ab-j8bf-e7dx
36
vulnerability VCID-d6mk-hg8h-7qbc
37
vulnerability VCID-dpgz-dacm-sqg6
38
vulnerability VCID-du16-f2wp-t3cw
39
vulnerability VCID-dur2-pfke-h7hf
40
vulnerability VCID-dx43-89w9-a7dg
41
vulnerability VCID-e7zd-dn28-4bf1
42
vulnerability VCID-e9zx-zy9y-2fcp
43
vulnerability VCID-eahe-s41f-ckc1
44
vulnerability VCID-egy6-nku7-zyap
45
vulnerability VCID-evth-swm9-k3de
46
vulnerability VCID-fz5y-um7w-63f4
47
vulnerability VCID-fzam-yuyg-qyd5
48
vulnerability VCID-fzm9-e6bg-r7aw
49
vulnerability VCID-gedj-39p5-ubd6
50
vulnerability VCID-gxj9-a1hc-47de
51
vulnerability VCID-hbau-7tvg-cygz
52
vulnerability VCID-hfbb-ax6r-tbaz
53
vulnerability VCID-hh8a-mgkk-3yb5
54
vulnerability VCID-j124-q39m-mkby
55
vulnerability VCID-j5vp-2jrx-ukf4
56
vulnerability VCID-j6ss-8f4e-e7g2
57
vulnerability VCID-jhd5-tqph-3ufu
58
vulnerability VCID-jr49-4fs3-8qcp
59
vulnerability VCID-kezx-5nw5-hfen
60
vulnerability VCID-kje4-asu6-dfg2
61
vulnerability VCID-kq4m-anrt-rugn
62
vulnerability VCID-kuzc-uv5b-v7an
63
vulnerability VCID-kxnm-y19k-mqg2
64
vulnerability VCID-m5z8-hz81-j7b7
65
vulnerability VCID-m83v-51cy-uqar
66
vulnerability VCID-mhvf-2keh-2qar
67
vulnerability VCID-mjb6-7au8-5fdx
68
vulnerability VCID-msac-ptqf-pyg1
69
vulnerability VCID-mtr5-suag-2bdj
70
vulnerability VCID-ns8t-vtcn-aqh4
71
vulnerability VCID-p222-28c1-vfhy
72
vulnerability VCID-qfw5-3tdu-x7g4
73
vulnerability VCID-qgpx-hgzu-5qgp
74
vulnerability VCID-qj4x-u7gx-9uf1
75
vulnerability VCID-qp7s-amch-v3cd
76
vulnerability VCID-qzqd-271b-ybfj
77
vulnerability VCID-r4bw-w4t9-23ek
78
vulnerability VCID-r7nh-arcj-8fb3
79
vulnerability VCID-rbjk-3gcs-2qb5
80
vulnerability VCID-rduw-apr6-4fdu
81
vulnerability VCID-re84-qg3k-3ub3
82
vulnerability VCID-rf6p-ct86-5bgz
83
vulnerability VCID-ruru-fwmn-5kes
84
vulnerability VCID-rxac-w9pd-aqe1
85
vulnerability VCID-s4bp-kzfu-8qfy
86
vulnerability VCID-s5e2-d6n8-kkbr
87
vulnerability VCID-scg7-ugdn-53b9
88
vulnerability VCID-shfz-pxan-v3ar
89
vulnerability VCID-te3b-exz5-zke1
90
vulnerability VCID-tvz9-8s4d-gbg6
91
vulnerability VCID-txb3-ez5r-r7ek
92
vulnerability VCID-ugyc-gehq-rudu
93
vulnerability VCID-upcj-z3c1-ubcf
94
vulnerability VCID-vu36-a1g1-nugt
95
vulnerability VCID-vx13-4b1d-wbgp
96
vulnerability VCID-w3zd-fezc-nuhd
97
vulnerability VCID-wjfe-wh5k-1qft
98
vulnerability VCID-ws6y-k3tx-r3gb
99
vulnerability VCID-wvyx-2bbb-9yf7
100
vulnerability VCID-x46d-a16g-nkg9
101
vulnerability VCID-xfvu-2zg4-ruf6
102
vulnerability VCID-xk5y-7a1w-zba9
103
vulnerability VCID-xsq8-ztqh-ubb8
104
vulnerability VCID-y1v3-9tyq-uqhd
105
vulnerability VCID-y4r1-yr69-uuf6
106
vulnerability VCID-y4u6-cy8y-hyae
107
vulnerability VCID-y7x4-664r-3fbk
108
vulnerability VCID-yuvf-e7hk-kqf9
109
vulnerability VCID-z2v2-n138-6ydv
110
vulnerability VCID-zdpz-8tc2-6kah
111
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p1
3
url pkg:composer/magento/community-edition@2.4.5
purl pkg:composer/magento/community-edition@2.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2h52-3pt6-dfcw
2
vulnerability VCID-2vsw-t8k2-4bfm
3
vulnerability VCID-3et4-3zad-1qfn
4
vulnerability VCID-3g5s-hryc-5qa9
5
vulnerability VCID-3zcy-b3th-ukhd
6
vulnerability VCID-4dae-vty8-b7hk
7
vulnerability VCID-525q-afzj-tkcp
8
vulnerability VCID-5gxr-xksz-5ydb
9
vulnerability VCID-6p6q-ctya-q3bv
10
vulnerability VCID-6t9w-cnkz-s3c3
11
vulnerability VCID-6tx4-wexr-fkbb
12
vulnerability VCID-7ewa-w75h-qfdy
13
vulnerability VCID-7hrm-jtbx-sqgm
14
vulnerability VCID-7pr7-uqp1-sugt
15
vulnerability VCID-7s3w-8dn6-jqh7
16
vulnerability VCID-7s74-rdkp-vyaf
17
vulnerability VCID-7s7e-adr6-h3dc
18
vulnerability VCID-8hx4-r8bb-n7ge
19
vulnerability VCID-8ky6-w2nk-9bds
20
vulnerability VCID-8msu-s38a-p7e3
21
vulnerability VCID-8shb-t5zp-rqbu
22
vulnerability VCID-9cc9-npdc-8bac
23
vulnerability VCID-9vrt-uccb-myev
24
vulnerability VCID-a8gs-ervm-e3hm
25
vulnerability VCID-a9b6-tenb-afdw
26
vulnerability VCID-agtm-nkhp-dkdn
27
vulnerability VCID-ayfe-5a7g-u7b7
28
vulnerability VCID-az2w-5xhy-5fe4
29
vulnerability VCID-b3cn-pjp3-4yhm
30
vulnerability VCID-b4jg-dj1a-9qd5
31
vulnerability VCID-b9ry-u6qy-j7cc
32
vulnerability VCID-bch8-kq49-skhm
33
vulnerability VCID-bera-73sm-bbh7
34
vulnerability VCID-bkpz-ratd-e7ab
35
vulnerability VCID-bzyh-c5tm-j7dn
36
vulnerability VCID-cc8x-6es1-8kc5
37
vulnerability VCID-ccx1-qacj-2qev
38
vulnerability VCID-cgwk-hn4t-n7c1
39
vulnerability VCID-cm2a-1yc5-v3cy
40
vulnerability VCID-cqjn-3z6n-sff1
41
vulnerability VCID-d2ab-j8bf-e7dx
42
vulnerability VCID-d6mk-hg8h-7qbc
43
vulnerability VCID-dpgz-dacm-sqg6
44
vulnerability VCID-du16-f2wp-t3cw
45
vulnerability VCID-dur2-pfke-h7hf
46
vulnerability VCID-dx43-89w9-a7dg
47
vulnerability VCID-e7zd-dn28-4bf1
48
vulnerability VCID-e9zx-zy9y-2fcp
49
vulnerability VCID-eahe-s41f-ckc1
50
vulnerability VCID-egy6-nku7-zyap
51
vulnerability VCID-evth-swm9-k3de
52
vulnerability VCID-eygc-ra9u-gyej
53
vulnerability VCID-fz5y-um7w-63f4
54
vulnerability VCID-fzam-yuyg-qyd5
55
vulnerability VCID-gedj-39p5-ubd6
56
vulnerability VCID-gxj9-a1hc-47de
57
vulnerability VCID-hbau-7tvg-cygz
58
vulnerability VCID-hfbb-ax6r-tbaz
59
vulnerability VCID-hh8a-mgkk-3yb5
60
vulnerability VCID-j124-q39m-mkby
61
vulnerability VCID-j5vp-2jrx-ukf4
62
vulnerability VCID-j6ss-8f4e-e7g2
63
vulnerability VCID-jhd5-tqph-3ufu
64
vulnerability VCID-kezx-5nw5-hfen
65
vulnerability VCID-kje4-asu6-dfg2
66
vulnerability VCID-kq4m-anrt-rugn
67
vulnerability VCID-kuzc-uv5b-v7an
68
vulnerability VCID-kxnm-y19k-mqg2
69
vulnerability VCID-m5z8-hz81-j7b7
70
vulnerability VCID-m83v-51cy-uqar
71
vulnerability VCID-md7v-w5aq-t7h1
72
vulnerability VCID-mhvf-2keh-2qar
73
vulnerability VCID-mjb6-7au8-5fdx
74
vulnerability VCID-msac-ptqf-pyg1
75
vulnerability VCID-mtr5-suag-2bdj
76
vulnerability VCID-ns8t-vtcn-aqh4
77
vulnerability VCID-p222-28c1-vfhy
78
vulnerability VCID-qfw5-3tdu-x7g4
79
vulnerability VCID-qgpx-hgzu-5qgp
80
vulnerability VCID-qj4x-u7gx-9uf1
81
vulnerability VCID-qp7s-amch-v3cd
82
vulnerability VCID-qzqd-271b-ybfj
83
vulnerability VCID-r4bw-w4t9-23ek
84
vulnerability VCID-r7nh-arcj-8fb3
85
vulnerability VCID-rbjk-3gcs-2qb5
86
vulnerability VCID-rduw-apr6-4fdu
87
vulnerability VCID-re84-qg3k-3ub3
88
vulnerability VCID-rf6p-ct86-5bgz
89
vulnerability VCID-ruru-fwmn-5kes
90
vulnerability VCID-rxac-w9pd-aqe1
91
vulnerability VCID-s4bp-kzfu-8qfy
92
vulnerability VCID-s5e2-d6n8-kkbr
93
vulnerability VCID-scg7-ugdn-53b9
94
vulnerability VCID-shfz-pxan-v3ar
95
vulnerability VCID-tc3m-4bkg-qkcf
96
vulnerability VCID-te3b-exz5-zke1
97
vulnerability VCID-tvz9-8s4d-gbg6
98
vulnerability VCID-txb3-ez5r-r7ek
99
vulnerability VCID-tzug-ckkn-dyft
100
vulnerability VCID-ugyc-gehq-rudu
101
vulnerability VCID-upcj-z3c1-ubcf
102
vulnerability VCID-vu36-a1g1-nugt
103
vulnerability VCID-vx13-4b1d-wbgp
104
vulnerability VCID-w3zd-fezc-nuhd
105
vulnerability VCID-wjfe-wh5k-1qft
106
vulnerability VCID-ws6y-k3tx-r3gb
107
vulnerability VCID-wvyx-2bbb-9yf7
108
vulnerability VCID-wzu6-rbsv-mkde
109
vulnerability VCID-x46d-a16g-nkg9
110
vulnerability VCID-xfvu-2zg4-ruf6
111
vulnerability VCID-xk5y-7a1w-zba9
112
vulnerability VCID-xsq8-ztqh-ubb8
113
vulnerability VCID-y1v3-9tyq-uqhd
114
vulnerability VCID-y4r1-yr69-uuf6
115
vulnerability VCID-y4u6-cy8y-hyae
116
vulnerability VCID-y7x4-664r-3fbk
117
vulnerability VCID-yuvf-e7hk-kqf9
118
vulnerability VCID-z2v2-n138-6ydv
119
vulnerability VCID-zdpz-8tc2-6kah
120
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5
4
url pkg:composer/magento/project-community-edition@2.0.2
purl pkg:composer/magento/project-community-edition@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2h52-3pt6-dfcw
2
vulnerability VCID-2vsw-t8k2-4bfm
3
vulnerability VCID-2z3f-wtw6-yydf
4
vulnerability VCID-36ve-7wxt-z7fz
5
vulnerability VCID-3et4-3zad-1qfn
6
vulnerability VCID-3zcy-b3th-ukhd
7
vulnerability VCID-4dae-vty8-b7hk
8
vulnerability VCID-525q-afzj-tkcp
9
vulnerability VCID-5gxr-xksz-5ydb
10
vulnerability VCID-6p6q-ctya-q3bv
11
vulnerability VCID-6t9w-cnkz-s3c3
12
vulnerability VCID-6tx4-wexr-fkbb
13
vulnerability VCID-7hrm-jtbx-sqgm
14
vulnerability VCID-7s74-rdkp-vyaf
15
vulnerability VCID-7s7e-adr6-h3dc
16
vulnerability VCID-8hx4-r8bb-n7ge
17
vulnerability VCID-8ky6-w2nk-9bds
18
vulnerability VCID-8msu-s38a-p7e3
19
vulnerability VCID-8shb-t5zp-rqbu
20
vulnerability VCID-9cc9-npdc-8bac
21
vulnerability VCID-9vrt-uccb-myev
22
vulnerability VCID-a8gs-ervm-e3hm
23
vulnerability VCID-a9b6-tenb-afdw
24
vulnerability VCID-agtm-nkhp-dkdn
25
vulnerability VCID-az2w-5xhy-5fe4
26
vulnerability VCID-b3cn-pjp3-4yhm
27
vulnerability VCID-b4jg-dj1a-9qd5
28
vulnerability VCID-b5hn-f1qk-z7cu
29
vulnerability VCID-b9ry-u6qy-j7cc
30
vulnerability VCID-cafy-5dd8-rudj
31
vulnerability VCID-cc8x-6es1-8kc5
32
vulnerability VCID-ccx1-qacj-2qev
33
vulnerability VCID-cgwk-hn4t-n7c1
34
vulnerability VCID-cm2a-1yc5-v3cy
35
vulnerability VCID-cqjn-3z6n-sff1
36
vulnerability VCID-d2ab-j8bf-e7dx
37
vulnerability VCID-d6mk-hg8h-7qbc
38
vulnerability VCID-dj5a-35gt-u7dn
39
vulnerability VCID-dpgz-dacm-sqg6
40
vulnerability VCID-dx43-89w9-a7dg
41
vulnerability VCID-e9zx-zy9y-2fcp
42
vulnerability VCID-egy6-nku7-zyap
43
vulnerability VCID-eygc-ra9u-gyej
44
vulnerability VCID-fz5y-um7w-63f4
45
vulnerability VCID-fzam-yuyg-qyd5
46
vulnerability VCID-fzm9-e6bg-r7aw
47
vulnerability VCID-gedj-39p5-ubd6
48
vulnerability VCID-hbau-7tvg-cygz
49
vulnerability VCID-hh8a-mgkk-3yb5
50
vulnerability VCID-j124-q39m-mkby
51
vulnerability VCID-j5vp-2jrx-ukf4
52
vulnerability VCID-j6ss-8f4e-e7g2
53
vulnerability VCID-jhd5-tqph-3ufu
54
vulnerability VCID-jr49-4fs3-8qcp
55
vulnerability VCID-kezx-5nw5-hfen
56
vulnerability VCID-kxnm-y19k-mqg2
57
vulnerability VCID-m5z8-hz81-j7b7
58
vulnerability VCID-m83v-51cy-uqar
59
vulnerability VCID-md7v-w5aq-t7h1
60
vulnerability VCID-mhvf-2keh-2qar
61
vulnerability VCID-mjb6-7au8-5fdx
62
vulnerability VCID-msac-ptqf-pyg1
63
vulnerability VCID-mtr5-suag-2bdj
64
vulnerability VCID-nn21-hf8r-ykfd
65
vulnerability VCID-p222-28c1-vfhy
66
vulnerability VCID-qfw5-3tdu-x7g4
67
vulnerability VCID-qj4x-u7gx-9uf1
68
vulnerability VCID-qp7s-amch-v3cd
69
vulnerability VCID-qrwc-3gsb-zkfy
70
vulnerability VCID-qzqd-271b-ybfj
71
vulnerability VCID-r4bw-w4t9-23ek
72
vulnerability VCID-r7nh-arcj-8fb3
73
vulnerability VCID-rbjk-3gcs-2qb5
74
vulnerability VCID-re84-qg3k-3ub3
75
vulnerability VCID-rf6p-ct86-5bgz
76
vulnerability VCID-ruru-fwmn-5kes
77
vulnerability VCID-s4bp-kzfu-8qfy
78
vulnerability VCID-s5e2-d6n8-kkbr
79
vulnerability VCID-scg7-ugdn-53b9
80
vulnerability VCID-tc3m-4bkg-qkcf
81
vulnerability VCID-te3b-exz5-zke1
82
vulnerability VCID-th7y-aj51-mbaj
83
vulnerability VCID-tvz9-8s4d-gbg6
84
vulnerability VCID-tzug-ckkn-dyft
85
vulnerability VCID-upcj-z3c1-ubcf
86
vulnerability VCID-w3zd-fezc-nuhd
87
vulnerability VCID-wjfe-wh5k-1qft
88
vulnerability VCID-ws6y-k3tx-r3gb
89
vulnerability VCID-wzu6-rbsv-mkde
90
vulnerability VCID-x46d-a16g-nkg9
91
vulnerability VCID-xsq8-ztqh-ubb8
92
vulnerability VCID-y4r1-yr69-uuf6
93
vulnerability VCID-y7x4-664r-3fbk
94
vulnerability VCID-y93w-2qcc-wqg8
95
vulnerability VCID-yuvf-e7hk-kqf9
96
vulnerability VCID-yyq6-dvyx-3bb9
97
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/project-community-edition@2.0.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-22247
reference_id
reference_type
scores
0
value 0.04774
scoring_system epss
scoring_elements 0.89643
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-22247
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb23-17.html
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://helpx.adobe.com/security/products/magento/apsb23-17.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-22247
reference_id CVE-2023-22247
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-22247
4
reference_url https://github.com/advisories/GHSA-2444-8gj8-6fmx
reference_id GHSA-2444-8gj8-6fmx
reference_type
scores
url https://github.com/advisories/GHSA-2444-8gj8-6fmx
Weaknesses
0
cwe_id 91
name XML Injection (aka Blind XPath Injection)
description The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d2ab-j8bf-e7dx