Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d66x-bm58-pfgt
Summary
Improper Privilege Management
Spring Framework WebFlux applications are vulnerable to a privilege escalation. By (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFlux application, or overwrite arbitrary files with multipart request data.
Aliases
0
alias CVE-2021-22118
1
alias GHSA-gfwj-fwqj-fp3v
Fixed_packages
0
url pkg:deb/debian/libspring-java@0?distro=trixie
purl pkg:deb/debian/libspring-java@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@0%3Fdistro=trixie
1
url pkg:deb/debian/libspring-java@4.3.30-1?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-1%3Fdistro=trixie
2
url pkg:deb/debian/libspring-java@4.3.30-2?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-2%3Fdistro=trixie
3
url pkg:deb/debian/libspring-java@4.3.30-3?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-3%3Fdistro=trixie
4
url pkg:deb/debian/libspring-java@4.3.30-4?distro=trixie
purl pkg:deb/debian/libspring-java@4.3.30-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libspring-java@4.3.30-4%3Fdistro=trixie
5
url pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-ehpw-txyw-auh6
3
vulnerability VCID-n8kg-ajw8-5yd2
4
vulnerability VCID-pssx-sdx7-afgg
5
vulnerability VCID-uvga-6hdm-3kda
6
vulnerability VCID-vr7m-chzs-abfu
7
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.14.RELEASE
6
url pkg:maven/org.springframework/spring-core@5.3.7
purl pkg:maven/org.springframework/spring-core@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.7
7
url pkg:maven/org.springframework/spring-web@5.3.7
purl pkg:maven/org.springframework/spring-web@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rv3-3z83-2yd1
1
vulnerability VCID-7mrx-1x83-uugp
2
vulnerability VCID-kcma-n11h-q7ft
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.7
8
url pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-q9g6-nwun-qkgw
2
vulnerability VCID-vr7m-chzs-abfu
3
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.15.RELEASE
9
url pkg:maven/org.springframework/spring-webflux@5.3.7
purl pkg:maven/org.springframework/spring-webflux@5.3.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-q9g6-nwun-qkgw
2
vulnerability VCID-vr7m-chzs-abfu
3
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.7
Affected_packages
0
url pkg:maven/org.springframework/spring-core@5.2.0
purl pkg:maven/org.springframework/spring-core@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1myc-q87e-jua3
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-pssx-sdx7-afgg
4
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.0
1
url pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.0.RELEASE
2
url pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.1.RELEASE
3
url pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.2.RELEASE
4
url pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.3.RELEASE
5
url pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.4.RELEASE
6
url pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.5.RELEASE
7
url pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.6.RELEASE
8
url pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-fra1-reqm-kfdb
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.7.RELEASE
9
url pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.8.RELEASE
10
url pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.9.RELEASE
11
url pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.10.RELEASE
12
url pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.11.RELEASE
13
url pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.12.RELEASE
14
url pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
purl pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-amxf-c3z4-gbhk
1
vulnerability VCID-cfmp-m8jn-uqg4
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-ehpw-txyw-auh6
4
vulnerability VCID-n8kg-ajw8-5yd2
5
vulnerability VCID-pssx-sdx7-afgg
6
vulnerability VCID-uvga-6hdm-3kda
7
vulnerability VCID-vr7m-chzs-abfu
8
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.13.RELEASE
15
url pkg:maven/org.springframework/spring-core@5.2.14
purl pkg:maven/org.springframework/spring-core@5.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d66x-bm58-pfgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.2.14
16
url pkg:maven/org.springframework/spring-core@5.3.0
purl pkg:maven/org.springframework/spring-core@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1myc-q87e-jua3
1
vulnerability VCID-6ach-4jet-a3cb
2
vulnerability VCID-amxf-c3z4-gbhk
3
vulnerability VCID-cfmp-m8jn-uqg4
4
vulnerability VCID-d66x-bm58-pfgt
5
vulnerability VCID-ehpw-txyw-auh6
6
vulnerability VCID-n8kg-ajw8-5yd2
7
vulnerability VCID-pssx-sdx7-afgg
8
vulnerability VCID-uvga-6hdm-3kda
9
vulnerability VCID-vr7m-chzs-abfu
10
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.0
17
url pkg:maven/org.springframework/spring-core@5.3.1
purl pkg:maven/org.springframework/spring-core@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.1
18
url pkg:maven/org.springframework/spring-core@5.3.2
purl pkg:maven/org.springframework/spring-core@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.2
19
url pkg:maven/org.springframework/spring-core@5.3.3
purl pkg:maven/org.springframework/spring-core@5.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.3
20
url pkg:maven/org.springframework/spring-core@5.3.4
purl pkg:maven/org.springframework/spring-core@5.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.4
21
url pkg:maven/org.springframework/spring-core@5.3.5
purl pkg:maven/org.springframework/spring-core@5.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.5
22
url pkg:maven/org.springframework/spring-core@5.3.6
purl pkg:maven/org.springframework/spring-core@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ach-4jet-a3cb
1
vulnerability VCID-amxf-c3z4-gbhk
2
vulnerability VCID-cfmp-m8jn-uqg4
3
vulnerability VCID-d66x-bm58-pfgt
4
vulnerability VCID-ehpw-txyw-auh6
5
vulnerability VCID-n8kg-ajw8-5yd2
6
vulnerability VCID-pssx-sdx7-afgg
7
vulnerability VCID-uvga-6hdm-3kda
8
vulnerability VCID-vr7m-chzs-abfu
9
vulnerability VCID-yqhz-ueqh-kfc4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-core@5.3.6
23
url pkg:maven/org.springframework/spring-web@5.2.0
purl pkg:maven/org.springframework/spring-web@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d66x-bm58-pfgt
1
vulnerability VCID-fra1-reqm-kfdb
2
vulnerability VCID-tsjn-scdc-fqh3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.2.0
24
url pkg:maven/org.springframework/spring-web@5.2.14
purl pkg:maven/org.springframework/spring-web@5.2.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d66x-bm58-pfgt
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.2.14
25
url pkg:maven/org.springframework/spring-web@5.3.0
purl pkg:maven/org.springframework/spring-web@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rv3-3z83-2yd1
1
vulnerability VCID-7mrx-1x83-uugp
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-e1rm-xg49-uqd6
4
vulnerability VCID-kcma-n11h-q7ft
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.0
26
url pkg:maven/org.springframework/spring-web@5.3.6
purl pkg:maven/org.springframework/spring-web@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1rv3-3z83-2yd1
1
vulnerability VCID-7mrx-1x83-uugp
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-kcma-n11h-q7ft
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-web@5.3.6
27
url pkg:maven/org.springframework/spring-webflux@5.2.0
purl pkg:maven/org.springframework/spring-webflux@5.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pkk-3mj7-jyag
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-tsjn-scdc-fqh3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.0
28
url pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-6pkk-3mj7-jyag
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-fra1-reqm-kfdb
4
vulnerability VCID-q9g6-nwun-qkgw
5
vulnerability VCID-tsjn-scdc-fqh3
6
vulnerability VCID-vr7m-chzs-abfu
7
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.0.RELEASE
29
url pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-6pkk-3mj7-jyag
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-fra1-reqm-kfdb
4
vulnerability VCID-q9g6-nwun-qkgw
5
vulnerability VCID-tsjn-scdc-fqh3
6
vulnerability VCID-vr7m-chzs-abfu
7
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.1.RELEASE
30
url pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-6pkk-3mj7-jyag
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-fra1-reqm-kfdb
4
vulnerability VCID-q9g6-nwun-qkgw
5
vulnerability VCID-tsjn-scdc-fqh3
6
vulnerability VCID-vr7m-chzs-abfu
7
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.2.RELEASE
31
url pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.3.RELEASE
32
url pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.4.RELEASE
33
url pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.5.RELEASE
34
url pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.6.RELEASE
35
url pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-fra1-reqm-kfdb
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.7.RELEASE
36
url pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.8.RELEASE
37
url pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.9.RELEASE
38
url pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.10.RELEASE
39
url pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.11.RELEASE
40
url pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.12.RELEASE
41
url pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.13.RELEASE
42
url pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
purl pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.2.14.RELEASE
43
url pkg:maven/org.springframework/spring-webflux@5.3.0
purl pkg:maven/org.springframework/spring-webflux@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-amw7-64u1-nbdh
2
vulnerability VCID-d66x-bm58-pfgt
3
vulnerability VCID-q9g6-nwun-qkgw
4
vulnerability VCID-vr7m-chzs-abfu
5
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.0
44
url pkg:maven/org.springframework/spring-webflux@5.3.1
purl pkg:maven/org.springframework/spring-webflux@5.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.1
45
url pkg:maven/org.springframework/spring-webflux@5.3.2
purl pkg:maven/org.springframework/spring-webflux@5.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.2
46
url pkg:maven/org.springframework/spring-webflux@5.3.3
purl pkg:maven/org.springframework/spring-webflux@5.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.3
47
url pkg:maven/org.springframework/spring-webflux@5.3.4
purl pkg:maven/org.springframework/spring-webflux@5.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.4
48
url pkg:maven/org.springframework/spring-webflux@5.3.5
purl pkg:maven/org.springframework/spring-webflux@5.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.5
49
url pkg:maven/org.springframework/spring-webflux@5.3.6
purl pkg:maven/org.springframework/spring-webflux@5.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-33up-jmsk-qffx
1
vulnerability VCID-d66x-bm58-pfgt
2
vulnerability VCID-q9g6-nwun-qkgw
3
vulnerability VCID-vr7m-chzs-abfu
4
vulnerability VCID-xrqe-h6t7-nkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.springframework/spring-webflux@5.3.6
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22118.json
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-22118.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-22118
reference_id
reference_type
scores
0
value 0.00253
scoring_system epss
scoring_elements 0.48765
published_at 2026-06-04T12:55:00Z
1
value 0.00253
scoring_system epss
scoring_elements 0.48826
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-22118
2
reference_url https://github.com/spring-projects/spring-framework
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework
3
reference_url https://github.com/spring-projects/spring-framework/commit/0d0d75e25322d8161002d861fff3ec04ba8be5ac
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/commit/0d0d75e25322d8161002d861fff3ec04ba8be5ac
4
reference_url https://github.com/spring-projects/spring-framework/commit/cce60c479c22101f24b2b4abebb6d79440b120d1
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/commit/cce60c479c22101f24b2b4abebb6d79440b120d1
5
reference_url https://github.com/spring-projects/spring-framework/issues/26931
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/spring-projects/spring-framework/issues/26931
6
reference_url https://security.netapp.com/advisory/ntap-20210713-0005
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20210713-0005
7
reference_url https://security.netapp.com/advisory/ntap-20210713-0005/
reference_id
reference_type
scores
url https://security.netapp.com/advisory/ntap-20210713-0005/
8
reference_url https://spring.io/security/cve-2021-22118
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://spring.io/security/cve-2021-22118
9
reference_url https://tanzu.vmware.com/security/cve-2021-22118
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://tanzu.vmware.com/security/cve-2021-22118
10
reference_url https://www.oracle.com/security-alerts/cpuapr2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuapr2022.html
11
reference_url https://www.oracle.com/security-alerts/cpujan2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujan2022.html
12
reference_url https://www.oracle.com//security-alerts/cpujul2021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com//security-alerts/cpujul2021.html
13
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
14
reference_url https://www.oracle.com/security-alerts/cpuoct2021.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpuoct2021.html
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1974854
reference_id 1974854
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1974854
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-22118
reference_id CVE-2021-22118
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-22118
17
reference_url https://github.com/advisories/GHSA-gfwj-fwqj-fp3v
reference_id GHSA-gfwj-fwqj-fp3v
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gfwj-fwqj-fp3v
18
reference_url https://access.redhat.com/errata/RHSA-2021:3205
reference_id RHSA-2021:3205
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:3205
19
reference_url https://access.redhat.com/errata/RHSA-2021:4918
reference_id RHSA-2021:4918
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:4918
20
reference_url https://access.redhat.com/errata/RHSA-2021:5134
reference_id RHSA-2021:5134
reference_type
scores
url https://access.redhat.com/errata/RHSA-2021:5134
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 269
name Improper Privilege Management
description The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 281
name Improper Preservation of Permissions
description The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
4
cwe_id 668
name Exposure of Resource to Wrong Sphere
description The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d66x-bm58-pfgt