Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/45331?format=api",
    "vulnerability_id": "VCID-6t3j-45g9-mkcf",
    "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nKiwi TCMS is an open source test management system for both manual and automated testing. Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded and `Content-Security-Policy` definition to prevent cross-site-scripting attacks. The upload validation checks were not 100% robust which left the possibility to circumvent them and upload a potentially dangerous file which allows execution of arbitrary JavaScript in the browser. Additionally we've discovered that Nginx's `proxy_pass` directive will strip some headers negating protections built into Kiwi TCMS when served behind a reverse proxy. This issue has been addressed in version 12.4. Users are advised to upgrade. Users unable to upgrade who are serving Kiwi TCMS behind a reverse proxy should make sure that additional header values are still passed to the client browser. If they aren't redefining them inside the proxy configuration.",
    "aliases": [
        {
            "alias": "CVE-2023-33977"
        },
        {
            "alias": "GHSA-2fqm-m4r2-fh98"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/65323?format=api",
            "purl": "pkg:pypi/kiwitcms@12.4",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/kiwitcms@12.4"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/33496?format=api",
            "purl": "pkg:pypi/kiwitcms@12.3",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6t3j-45g9-mkcf"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/kiwitcms@12.3"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L66-L68",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L66-L68"
        },
        {
            "reference_url": "https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L87",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/kiwitcms/Kiwi/blob/master/etc/nginx.conf#L87"
        },
        {
            "reference_url": "https://github.com/kiwitcms/kiwi/commit/d789f4b51025de4f8c747c037d02e1b0da80b034",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/kiwitcms/kiwi/commit/d789f4b51025de4f8c747c037d02e1b0da80b034"
        },
        {
            "reference_url": "https://huntr.dev/bounties/6aea9a26-e29a-467b-aa5a-f767f0c2ec96/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://huntr.dev/bounties/6aea9a26-e29a-467b-aa5a-f767f0c2ec96/"
        },
        {
            "reference_url": "https://kiwitcms.org/blog/kiwi-tcms-team/2023/06/06/kiwi-tcms-124/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://kiwitcms.org/blog/kiwi-tcms-team/2023/06/06/kiwi-tcms-124/"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33977",
            "reference_id": "CVE-2023-33977",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33977"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-2fqm-m4r2-fh98",
            "reference_id": "GHSA-2fqm-m4r2-fh98",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/advisories/GHSA-2fqm-m4r2-fh98"
        },
        {
            "reference_url": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-2fqm-m4r2-fh98",
            "reference_id": "GHSA-2fqm-m4r2-fh98",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-2fqm-m4r2-fh98"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 78,
            "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')",
            "description": "The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component."
        },
        {
            "cwe_id": 79,
            "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
            "description": "The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6t3j-45g9-mkcf"
}