Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-g4fb-k4w9-tbd8
Summary
Picklescan is missing detection when calling built-in python cProfile.run
Using cProfile.run function, which is a built-in python library function to execute remote pickle file.
Aliases
0
alias GHSA-49gj-c84q-6qm9
Fixed_packages
0
url pkg:pypi/picklescan@0.0.30
purl pkg:pypi/picklescan@0.0.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2syv-syp1-6yhk
1
vulnerability VCID-auku-kbg2-2ybg
2
vulnerability VCID-avk4-jaz6-m3gw
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/picklescan@0.0.30
Affected_packages
References
0
reference_url https://github.com/mmaitre314/picklescan
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mmaitre314/picklescan
1
reference_url https://github.com/mmaitre314/picklescan/commit/1931c2d04eaca8d20597705ff39cab78ba364e4b
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mmaitre314/picklescan/commit/1931c2d04eaca8d20597705ff39cab78ba364e4b
2
reference_url https://github.com/advisories/GHSA-49gj-c84q-6qm9
reference_id GHSA-49gj-c84q-6qm9
reference_type
scores
url https://github.com/advisories/GHSA-49gj-c84q-6qm9
3
reference_url https://github.com/mmaitre314/picklescan/security/advisories/GHSA-49gj-c84q-6qm9
reference_id GHSA-49gj-c84q-6qm9
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mmaitre314/picklescan/security/advisories/GHSA-49gj-c84q-6qm9
Weaknesses
0
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-g4fb-k4w9-tbd8