Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-f41r-p9hu-hyhx
Summary
Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads
The eZ Platform and Legacy are affected by an issue related to how uploaded PHP and PHAR files are handled, and consists of two parts: 1. Web server configuration, and 2. Disabling the PHAR stream wrapper.

**1. WEB SERVER CONFIGURATION**
The sample web server configuration in our documentation can in some cases allow the execution of uploaded PHP/PHAR code. This can be abused to allow priviledge escalation and breach of content access controls, among other things. Please ensure that your web server will not execute files in directories were files may be uploaded, such as web/var/ and ezpublish_legacy/var/

As an example, here is how you can make Apache return HTTP 403 Forbidden for a number of executable file types in your eZ Platform var directory. Please adapt it to your needs. It is then possible to enable logging of HTTP 403 in a separate log file if you wish, you could do this to see if someone is trying to abuse the server.
```
RewriteEngine On
Aliases
0
alias GHSA-pqjm-xcp8-wgmm
Fixed_packages
Affected_packages
0
url pkg:composer/ezsystems/ezpublish-legacy@5.3.0
purl pkg:composer/ezsystems/ezpublish-legacy@5.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2adj-kpzr-eycv
1
vulnerability VCID-a651-ayct-2fa1
2
vulnerability VCID-eaqz-xw6f-6yeb
3
vulnerability VCID-f41r-p9hu-hyhx
4
vulnerability VCID-gnad-89bk-x7cq
5
vulnerability VCID-rkq7-5cdy-k7d8
6
vulnerability VCID-ufw5-emg4-cqd6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@5.3.0
1
url pkg:composer/ezsystems/ezpublish-legacy@5.4.0
purl pkg:composer/ezsystems/ezpublish-legacy@5.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2adj-kpzr-eycv
1
vulnerability VCID-6cyy-uhhk-63aa
2
vulnerability VCID-a651-ayct-2fa1
3
vulnerability VCID-eaqz-xw6f-6yeb
4
vulnerability VCID-f41r-p9hu-hyhx
5
vulnerability VCID-gnad-89bk-x7cq
6
vulnerability VCID-qymv-b76a-2yh2
7
vulnerability VCID-rkq7-5cdy-k7d8
8
vulnerability VCID-ufw5-emg4-cqd6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@5.4.0
2
url pkg:composer/ezsystems/ezpublish-legacy@2011.0.0
purl pkg:composer/ezsystems/ezpublish-legacy@2011.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1q2y-ruwv-rqgr
1
vulnerability VCID-2975-xhf4-ckcj
2
vulnerability VCID-2adj-kpzr-eycv
3
vulnerability VCID-a651-ayct-2fa1
4
vulnerability VCID-bmkb-zcyd-6kdk
5
vulnerability VCID-eaqz-xw6f-6yeb
6
vulnerability VCID-f41r-p9hu-hyhx
7
vulnerability VCID-gnad-89bk-x7cq
8
vulnerability VCID-rkq7-5cdy-k7d8
9
vulnerability VCID-ufw5-emg4-cqd6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2011.0.0
3
url pkg:composer/ezsystems/ezpublish-legacy@2018.6.0
purl pkg:composer/ezsystems/ezpublish-legacy@2018.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2975-xhf4-ckcj
1
vulnerability VCID-29ju-364n-qkch
2
vulnerability VCID-2adj-kpzr-eycv
3
vulnerability VCID-eaqz-xw6f-6yeb
4
vulnerability VCID-f41r-p9hu-hyhx
5
vulnerability VCID-rkq7-5cdy-k7d8
6
vulnerability VCID-ufw5-emg4-cqd6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2018.6.0
4
url pkg:composer/ezsystems/ezpublish-legacy@2018.9.0
purl pkg:composer/ezsystems/ezpublish-legacy@2018.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2975-xhf4-ckcj
1
vulnerability VCID-2adj-kpzr-eycv
2
vulnerability VCID-eaqz-xw6f-6yeb
3
vulnerability VCID-f41r-p9hu-hyhx
4
vulnerability VCID-rkq7-5cdy-k7d8
5
vulnerability VCID-ufw5-emg4-cqd6
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ezsystems/ezpublish-legacy@2018.9.0
References
0
reference_url https://github.com/ezsystems/ezplatform/commit/9a0c52dc4535e4b3ce379f80222dc53f705a2cfd
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ezsystems/ezplatform/commit/9a0c52dc4535e4b3ce379f80222dc53f705a2cfd
1
reference_url https://github.com/ezsystems/ezpublish-legacy
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ezsystems/ezpublish-legacy
2
reference_url https://github.com/ezsystems/ezpublish-legacy/commit/d21957bf202b091ab39dfb5be300f6c30be3933e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/ezsystems/ezpublish-legacy/commit/d21957bf202b091ab39dfb5be300f6c30be3933e
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-11-21-1.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-11-21-1.yaml
4
reference_url http://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
5
reference_url https://web.archive.org/web/20210614192208/https://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20210614192208/https://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
6
reference_url https://github.com/advisories/GHSA-pqjm-xcp8-wgmm
reference_id GHSA-pqjm-xcp8-wgmm
reference_type
scores
url https://github.com/advisories/GHSA-pqjm-xcp8-wgmm
Weaknesses
0
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-f41r-p9hu-hyhx