Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mbd8-z3ry-cqap
Summary
Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page
Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect parameter.
Aliases
0
alias CVE-2023-5190
1
alias GHSA-f3rf-cr7f-cwc4
Fixed_packages
0
url pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3.6
purl pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3.6
1
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.102-ga102
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.102-ga102
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.102-ga102
Affected_packages
0
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.45-ga45
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.45-ga45
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mbd8-z3ry-cqap
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.45-ga45
References
0
reference_url https://github.com/liferay/liferay-portal
reference_id
reference_type
scores
url https://github.com/liferay/liferay-portal
1
reference_url https://github.com/liferay/liferay-portal/commit/26277c22498eb03bb192bbe9e5d2ee34d213780b
reference_id
reference_type
scores
url https://github.com/liferay/liferay-portal/commit/26277c22498eb03bb192bbe9e5d2ee34d213780b
2
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-5190
reference_id CVE-2023-5190
reference_type
scores
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-5190
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5190
reference_id CVE-2023-5190
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-5190
4
reference_url https://github.com/advisories/GHSA-f3rf-cr7f-cwc4
reference_id GHSA-f3rf-cr7f-cwc4
reference_type
scores
url https://github.com/advisories/GHSA-f3rf-cr7f-cwc4
Weaknesses
0
cwe_id 601
name URL Redirection to Untrusted Site ('Open Redirect')
description A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mbd8-z3ry-cqap