Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-96hp-qxsu-rqa2
Summary
High severity vulnerability that affects safemode
Withdrawn, accidental duplicate publish.

The safemode rubygem, as used in Foreman, versions 1.3.2 and earlier are vulnerable to bypassing safe mode limitations via special Ruby syntax. This can lead to deletion of objects for which the user does not have delete permissions or possibly to privilege escalation.
Aliases
0
alias GHSA-8474-rc7c-wrhp
Fixed_packages
0
url pkg:gem/safemode@1.3.3
purl pkg:gem/safemode@1.3.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.3.3
Affected_packages
0
url pkg:gem/safemode@0.0.2
purl pkg:gem/safemode@0.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@0.0.2
1
url pkg:gem/safemode@1.0.0
purl pkg:gem/safemode@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.0.0
2
url pkg:gem/safemode@1.0.1
purl pkg:gem/safemode@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.0.1
3
url pkg:gem/safemode@1.0.2
purl pkg:gem/safemode@1.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.0.2
4
url pkg:gem/safemode@1.1.0
purl pkg:gem/safemode@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.1.0
5
url pkg:gem/safemode@1.2.0
purl pkg:gem/safemode@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.0
6
url pkg:gem/safemode@1.2.1
purl pkg:gem/safemode@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.1
7
url pkg:gem/safemode@1.2.2
purl pkg:gem/safemode@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.2
8
url pkg:gem/safemode@1.2.3
purl pkg:gem/safemode@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6hub-g2ja-afaw
1
vulnerability VCID-6sgh-v5u7-w3h9
2
vulnerability VCID-96hp-qxsu-rqa2
3
vulnerability VCID-ty6t-p6kh-z7ap
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.3
9
url pkg:gem/safemode@1.2.4
purl pkg:gem/safemode@1.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sgh-v5u7-w3h9
1
vulnerability VCID-96hp-qxsu-rqa2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.4
10
url pkg:gem/safemode@1.2.5
purl pkg:gem/safemode@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sgh-v5u7-w3h9
1
vulnerability VCID-96hp-qxsu-rqa2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.2.5
11
url pkg:gem/safemode@1.3.1
purl pkg:gem/safemode@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sgh-v5u7-w3h9
1
vulnerability VCID-96hp-qxsu-rqa2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.3.1
12
url pkg:gem/safemode@1.3.2
purl pkg:gem/safemode@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6sgh-v5u7-w3h9
1
vulnerability VCID-96hp-qxsu-rqa2
resource_url http://public2.vulnerablecode.io/packages/pkg:gem/safemode@1.3.2
References
0
reference_url https://github.com/advisories/GHSA-8474-rc7c-wrhp
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-8474-rc7c-wrhp
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-7540
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-7540
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-96hp-qxsu-rqa2