Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-w483-prq4-rycx
Summary
TYPO3 Broken Access Control in Localization Handling
It has been discovered that backend users having limited access to specific languages are capable of modifying and creating pages in the default language which actually should be disallowed. A valid backend user account is needed in order to exploit this vulnerability.
Aliases
0
alias GHSA-772m-43f3-hmf8
Fixed_packages
0
url pkg:composer/typo3/cms@8.7.23
purl pkg:composer/typo3/cms@8.7.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-4eym-e6vt-8fbs
2
vulnerability VCID-7m6u-k5tp-gkhy
3
vulnerability VCID-848u-w88s-5bbe
4
vulnerability VCID-ev4k-5k1d-2bhu
5
vulnerability VCID-fqkx-v8t5-q3h6
6
vulnerability VCID-fut7-bb1f-37g7
7
vulnerability VCID-jp1p-rfxa-hyd9
8
vulnerability VCID-k5t3-28es-h3ez
9
vulnerability VCID-nney-azbc-pucg
10
vulnerability VCID-p7gd-anw2-1qbz
11
vulnerability VCID-qv14-m93d-jyd9
12
vulnerability VCID-rqrw-t2kj-mud8
13
vulnerability VCID-ru6w-m6q6-27gn
14
vulnerability VCID-sdsa-mh76-kqch
15
vulnerability VCID-tgyt-axv1-c7ag
16
vulnerability VCID-x5x1-w7yv-eye9
17
vulnerability VCID-xw1s-93bu-wuh9
18
vulnerability VCID-y7ds-p5r2-yuhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.7.23
Affected_packages
0
url pkg:composer/typo3/cms@8.0.0
purl pkg:composer/typo3/cms@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11u3-8xzy-jfhh
1
vulnerability VCID-1ffs-9vj5-27hk
2
vulnerability VCID-28fn-ncj5-2ufk
3
vulnerability VCID-2r7u-mc45-8yhe
4
vulnerability VCID-2rhr-8vaz-hqfj
5
vulnerability VCID-2vpx-fqb6-aqfa
6
vulnerability VCID-39jx-muqb-nkfq
7
vulnerability VCID-39vn-73mc-jqav
8
vulnerability VCID-3ugj-6m1e-e3hr
9
vulnerability VCID-4eym-e6vt-8fbs
10
vulnerability VCID-4wnp-gusy-43b8
11
vulnerability VCID-5dxs-cdht-27hw
12
vulnerability VCID-5u2f-5zzf-j3e4
13
vulnerability VCID-66kh-c1dm-8fbf
14
vulnerability VCID-66ru-n2df-b3ay
15
vulnerability VCID-6su8-bbrw-hbhp
16
vulnerability VCID-727q-h3ey-6yc9
17
vulnerability VCID-7ch1-q9f4-a7bt
18
vulnerability VCID-7m6u-k5tp-gkhy
19
vulnerability VCID-848u-w88s-5bbe
20
vulnerability VCID-8p64-6zpt-t3av
21
vulnerability VCID-94r9-hh4g-jkej
22
vulnerability VCID-953t-q1cr-zyd6
23
vulnerability VCID-9726-hafj-wkay
24
vulnerability VCID-9saf-w56y-pugz
25
vulnerability VCID-9yu1-z7c2-t3fj
26
vulnerability VCID-abjx-8v46-d7d8
27
vulnerability VCID-am6s-67bm-77dr
28
vulnerability VCID-bn3p-39sv-6fdg
29
vulnerability VCID-bq2j-t19h-zyad
30
vulnerability VCID-bstt-ybrs-5ua3
31
vulnerability VCID-buj5-2t53-3kcr
32
vulnerability VCID-d6c2-upx1-e7cd
33
vulnerability VCID-dsqm-9q3e-dudw
34
vulnerability VCID-e564-zdku-9fc6
35
vulnerability VCID-emqq-kwjg-3kfk
36
vulnerability VCID-eutz-mj58-audb
37
vulnerability VCID-ev4k-5k1d-2bhu
38
vulnerability VCID-f319-jpf5-hyex
39
vulnerability VCID-fdnw-2tz5-4fdr
40
vulnerability VCID-fgqa-5fx9-nkaz
41
vulnerability VCID-fh61-7rfy-s3hg
42
vulnerability VCID-fqkc-utex-3kav
43
vulnerability VCID-fqkx-v8t5-q3h6
44
vulnerability VCID-fut7-bb1f-37g7
45
vulnerability VCID-g7mm-vjbw-bbhd
46
vulnerability VCID-gk79-jtuz-myh6
47
vulnerability VCID-gpv4-4tpd-tbaa
48
vulnerability VCID-h217-xe8x-nua3
49
vulnerability VCID-h7cg-64er-uya9
50
vulnerability VCID-h7hf-sf2q-73ay
51
vulnerability VCID-hp99-ncuh-6ugv
52
vulnerability VCID-hyx9-8ae6-sba8
53
vulnerability VCID-hzma-cduk-3uhp
54
vulnerability VCID-j8hk-bqnb-gycp
55
vulnerability VCID-j8sh-5evd-dkaz
56
vulnerability VCID-jeqr-9tfu-f7b2
57
vulnerability VCID-jf28-91be-6kbr
58
vulnerability VCID-jmea-qzsr-wkf4
59
vulnerability VCID-jn38-wfec-7bb2
60
vulnerability VCID-jp1p-rfxa-hyd9
61
vulnerability VCID-jq5y-7h9g-mufa
62
vulnerability VCID-jqe4-8hzb-mfea
63
vulnerability VCID-jwb1-3sbg-kfa5
64
vulnerability VCID-k5t3-28es-h3ez
65
vulnerability VCID-khpm-e1xb-hydb
66
vulnerability VCID-ks1q-a8x2-uqht
67
vulnerability VCID-m3nc-xbb4-yubr
68
vulnerability VCID-mctp-nf36-7qdn
69
vulnerability VCID-nhjv-nke2-2kf8
70
vulnerability VCID-njsj-bwjq-fyap
71
vulnerability VCID-nney-azbc-pucg
72
vulnerability VCID-nvbp-pbjw-3qgx
73
vulnerability VCID-p576-w7dd-p3h7
74
vulnerability VCID-p7gd-anw2-1qbz
75
vulnerability VCID-pmvp-twk2-jqe4
76
vulnerability VCID-q2ym-y2rz-1bdn
77
vulnerability VCID-q52p-xfj8-gygd
78
vulnerability VCID-q7vt-19eb-sqeq
79
vulnerability VCID-qcnh-z4zh-myaw
80
vulnerability VCID-qdxh-arxx-wbcr
81
vulnerability VCID-qxab-9uwr-yqhv
82
vulnerability VCID-rqrw-t2kj-mud8
83
vulnerability VCID-ru6w-m6q6-27gn
84
vulnerability VCID-sdjb-gp4t-vbgt
85
vulnerability VCID-sdsa-mh76-kqch
86
vulnerability VCID-sdz8-hju8-4bcb
87
vulnerability VCID-sy7r-d6pv-yba9
88
vulnerability VCID-teby-zvvw-zkhv
89
vulnerability VCID-u259-2sxq-tbct
90
vulnerability VCID-u4tq-8qnk-5fd7
91
vulnerability VCID-u5he-6tqb-gqaf
92
vulnerability VCID-u6as-cwxc-pkhk
93
vulnerability VCID-uq77-aax5-k7d8
94
vulnerability VCID-vq15-t92r-5bhx
95
vulnerability VCID-vw2r-g8yy-eyf4
96
vulnerability VCID-w483-prq4-rycx
97
vulnerability VCID-w58p-3wg1-7ycr
98
vulnerability VCID-wat8-4m83-hken
99
vulnerability VCID-wy45-2gmr-fkfg
100
vulnerability VCID-x175-xjek-97ds
101
vulnerability VCID-x5x1-w7yv-eye9
102
vulnerability VCID-xh68-defe-f7ce
103
vulnerability VCID-xpxg-qq49-b7fd
104
vulnerability VCID-xvyu-2hb8-8ufh
105
vulnerability VCID-xw1s-93bu-wuh9
106
vulnerability VCID-y7ds-p5r2-yuhq
107
vulnerability VCID-ygw4-jdqu-4fbt
108
vulnerability VCID-yh6b-tc4u-v3bk
109
vulnerability VCID-yn6z-9v7k-x7br
110
vulnerability VCID-yz6t-ge1y-qfgr
111
vulnerability VCID-zgfw-pk39-gyg8
112
vulnerability VCID-zmwv-gwq3-fkej
113
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.0.0
References
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-01-22-3.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-01-22-3.yaml
1
reference_url https://github.com/TYPO3/typo3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3
2
reference_url https://github.com/TYPO3/typo3/commit/5004201ee77a69cb825637bc95cdeedb1186f4d4
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3/typo3/commit/5004201ee77a69cb825637bc95cdeedb1186f4d4
3
reference_url https://typo3.org/security/advisory/typo3-core-sa-2019-003
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/security/advisory/typo3-core-sa-2019-003
4
reference_url https://github.com/advisories/GHSA-772m-43f3-hmf8
reference_id GHSA-772m-43f3-hmf8
reference_type
scores
url https://github.com/advisories/GHSA-772m-43f3-hmf8
Weaknesses
0
cwe_id 285
name Improper Authorization
description The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-w483-prq4-rycx