Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-rybd-nsf5-j7fr
SummaryThe default installations of Apache Tomcat 3.2.3 and 3.2.4 allows remote attackers to obtain sensitive system information such as directory listings and web root path, via erroneous HTTP requests for Java Server Pages (JSP) in the (1) test/jsp, (2) samples/jsp and (3) examples/jsp directories, or the (4) test/realPath.jsp servlet, which leaks pathnames in error messages.
Aliases
0
alias CVE-2002-2007
Fixed_packages
0
url pkg:apache/tomcat@3.3.0-a
purl pkg:apache/tomcat@3.3.0-a
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ss8-442a-3baf
1
vulnerability VCID-6yk2-f8d5-cyc3
2
vulnerability VCID-9rpn-zb26-yfdk
3
vulnerability VCID-shq7-jxup-5fgk
4
vulnerability VCID-x6zh-jypa-pbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a
Affected_packages
0
url pkg:apache/tomcat@3.2.3
purl pkg:apache/tomcat@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-56a7-wfbu-7be8
1
vulnerability VCID-rybd-nsf5-j7fr
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.2.3
1
url pkg:apache/tomcat@3.2.4
purl pkg:apache/tomcat@3.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fb2-r763-ybg5
1
vulnerability VCID-6ss8-442a-3baf
2
vulnerability VCID-6yk2-f8d5-cyc3
3
vulnerability VCID-9rpn-zb26-yfdk
4
vulnerability VCID-edmc-muvz-5ufu
5
vulnerability VCID-rybd-nsf5-j7fr
6
vulnerability VCID-shq7-jxup-5fgk
7
vulnerability VCID-x6zh-jypa-pbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.2.4
2
url pkg:maven/org.apache.tomcat/tomcat@3.2.3
purl pkg:maven/org.apache.tomcat/tomcat@3.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-56a7-wfbu-7be8
1
vulnerability VCID-rybd-nsf5-j7fr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.2.3
3
url pkg:maven/org.apache.tomcat/tomcat@3.2.4
purl pkg:maven/org.apache.tomcat/tomcat@3.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fb2-r763-ybg5
1
vulnerability VCID-6ss8-442a-3baf
2
vulnerability VCID-6yk2-f8d5-cyc3
3
vulnerability VCID-9rpn-zb26-yfdk
4
vulnerability VCID-edmc-muvz-5ufu
5
vulnerability VCID-rybd-nsf5-j7fr
6
vulnerability VCID-shq7-jxup-5fgk
7
vulnerability VCID-x6zh-jypa-pbcc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.2.4
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-2007
reference_id
reference_type
scores
0
value 0.22609
scoring_system epss
scoring_elements 0.95868
published_at 2026-04-18T12:55:00Z
1
value 0.22609
scoring_system epss
scoring_elements 0.95815
published_at 2026-04-01T12:55:00Z
2
value 0.22609
scoring_system epss
scoring_elements 0.95823
published_at 2026-04-02T12:55:00Z
3
value 0.22609
scoring_system epss
scoring_elements 0.95832
published_at 2026-04-04T12:55:00Z
4
value 0.22609
scoring_system epss
scoring_elements 0.95834
published_at 2026-04-07T12:55:00Z
5
value 0.22609
scoring_system epss
scoring_elements 0.95843
published_at 2026-04-08T12:55:00Z
6
value 0.22609
scoring_system epss
scoring_elements 0.95846
published_at 2026-04-09T12:55:00Z
7
value 0.22609
scoring_system epss
scoring_elements 0.95849
published_at 2026-04-12T12:55:00Z
8
value 0.22609
scoring_system epss
scoring_elements 0.95851
published_at 2026-04-13T12:55:00Z
9
value 0.22609
scoring_system epss
scoring_elements 0.95862
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-2007
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2007
reference_id CVE-2002-2007
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2007
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21490.txt
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21490.txt
3
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21491.txt
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21491.txt
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21492.txt
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/21492.txt
5
reference_url https://www.securityfocus.com/bid/4876/info
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://www.securityfocus.com/bid/4876/info
6
reference_url https://www.securityfocus.com/bid/4877/info
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://www.securityfocus.com/bid/4877/info
7
reference_url https://www.securityfocus.com/bid/4878/info
reference_id CVE-2002-2007;OSVDB-13304
reference_type exploit
scores
url https://www.securityfocus.com/bid/4878/info
Weaknesses
Exploits
0
date_added 2002-05-29
description Apache Tomcat 3.2.3/3.2.4 - Example Files Web Root Full Path Disclosure
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2002-05-29
exploit_type remote
platform multiple
source_date_updated 2012-09-23
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/4877/info
Severity_range_score4.0 - 6.9
Exploitability2.0
Weighted_severity6.2
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-rybd-nsf5-j7fr