Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-yw5q-dtaz-1kc1
SummaryCross-site request forgery (CSRF) vulnerability in createDestination.action in Apache ActiveMQ before 5.3.1 allows remote attackers to hijack the authentication of unspecified victims for requests that create queues via the JMSDestination parameter in a queue action.
Aliases
0
alias CVE-2010-1244
1
alias GHSA-33j4-8vcr-f79v
Fixed_packages
0
url pkg:maven/org.apache.activemq/activemq-parent@5.3.1
purl pkg:maven/org.apache.activemq/activemq-parent@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@5.3.1
Affected_packages
0
url pkg:maven/org.apache.activemq/activemq-parent@4.1.1
purl pkg:maven/org.apache.activemq/activemq-parent@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@4.1.1
1
url pkg:maven/org.apache.activemq/activemq-parent@4.1.2
purl pkg:maven/org.apache.activemq/activemq-parent@4.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@4.1.2
2
url pkg:maven/org.apache.activemq/activemq-parent@5.0.0
purl pkg:maven/org.apache.activemq/activemq-parent@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@5.0.0
3
url pkg:maven/org.apache.activemq/activemq-parent@5.1.0
purl pkg:maven/org.apache.activemq/activemq-parent@5.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@5.1.0
4
url pkg:maven/org.apache.activemq/activemq-parent@5.2.0
purl pkg:maven/org.apache.activemq/activemq-parent@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@5.2.0
5
url pkg:maven/org.apache.activemq/activemq-parent@5.3.0
purl pkg:maven/org.apache.activemq/activemq-parent@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a3nb-p5p6-zbf7
1
vulnerability VCID-pwbk-99g5-9fhm
2
vulnerability VCID-yw5q-dtaz-1kc1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.activemq/activemq-parent@5.3.0
References
0
reference_url http://activemq.apache.org/activemq-531-release.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://activemq.apache.org/activemq-531-release.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1244.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-1244.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2010-1244
reference_id
reference_type
scores
0
value 0.00437
scoring_system epss
scoring_elements 0.63084
published_at 2026-04-21T12:55:00Z
1
value 0.00437
scoring_system epss
scoring_elements 0.63048
published_at 2026-04-04T12:55:00Z
2
value 0.00437
scoring_system epss
scoring_elements 0.63013
published_at 2026-04-07T12:55:00Z
3
value 0.00437
scoring_system epss
scoring_elements 0.63063
published_at 2026-04-08T12:55:00Z
4
value 0.00437
scoring_system epss
scoring_elements 0.63079
published_at 2026-04-09T12:55:00Z
5
value 0.00437
scoring_system epss
scoring_elements 0.63097
published_at 2026-04-11T12:55:00Z
6
value 0.00437
scoring_system epss
scoring_elements 0.63083
published_at 2026-04-12T12:55:00Z
7
value 0.00437
scoring_system epss
scoring_elements 0.6306
published_at 2026-04-13T12:55:00Z
8
value 0.00437
scoring_system epss
scoring_elements 0.63096
published_at 2026-04-16T12:55:00Z
9
value 0.00437
scoring_system epss
scoring_elements 0.63104
published_at 2026-04-18T12:55:00Z
10
value 0.00437
scoring_system epss
scoring_elements 0.62961
published_at 2026-04-01T12:55:00Z
11
value 0.00437
scoring_system epss
scoring_elements 0.63019
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2010-1244
3
reference_url http://secunia.com/advisories/39223
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/39223
4
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/57398
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/57398
5
reference_url https://github.com/apache/activemq
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/activemq
6
reference_url https://github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/activemq/commit/1f464b9412e1b1c08d40c8ffac40edd52731da48
7
reference_url https://github.com/apache/activemq/commit/f3d4034e2a7cee7b1f88c7e6b0d1d69458e1bcf0
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/activemq/commit/f3d4034e2a7cee7b1f88c7e6b0d1d69458e1bcf0
8
reference_url https://issues.apache.org/activemq/browse/AMQ-2613
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/activemq/browse/AMQ-2613
9
reference_url https://issues.apache.org/activemq/browse/AMQ-2625
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/activemq/browse/AMQ-2625
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=580889
reference_id 580889
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=580889
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2010-1244
reference_id CVE-2010-1244
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2010-1244
12
reference_url https://github.com/advisories/GHSA-33j4-8vcr-f79v
reference_id GHSA-33j4-8vcr-f79v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-33j4-8vcr-f79v
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-yw5q-dtaz-1kc1