Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-8rup-9gj7-uke1

Summary

Allocation of Resources Without Limits or Throttling
A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /config of the component Profile Config. The manipulation of the argument Name leads to allocation of resources. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-233359. NOTE: The vendor was contacted early about this disclosure but does not respond in any way.

Aliases

alias	CVE-2023-3566

Fixed_packages

url	pkg:composer/wallabag/wallabag@2.6.0
purl	pkg:composer/wallabag/wallabag@2.6.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:composer/wallabag/wallabag@2.6.0

Affected_packages

url pkg:composer/wallabag/wallabag@2.5.4

purl pkg:composer/wallabag/wallabag@2.5.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-8rup-9gj7-uke1

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/wallabag/wallabag@2.5.4

References

reference_url	https://github.com/ctflearner/Vulnerability/blob/main/WALLABAG/NAME-LIMIT.md
reference_id
reference_type
scores
url	https://github.com/ctflearner/Vulnerability/blob/main/WALLABAG/NAME-LIMIT.md

reference_url	https://vuldb.com/?ctiid.233359
reference_id
reference_type
scores
url	https://vuldb.com/?ctiid.233359

reference_url	https://vuldb.com/?id.233359
reference_id
reference_type
scores
url	https://vuldb.com/?id.233359

reference_url	https://youtu.be/ouwud0PlHkE
reference_id
reference_type
scores
url	https://youtu.be/ouwud0PlHkE

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2023-3566
reference_id	CVE-2023-3566
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2023-3566

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	770
name	Allocation of Resources Without Limits or Throttling
description	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8rup-9gj7-uke1

Vulnerability Instance