Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-aeeg-apyz-huda
Summary
TYPO3 Improper Access Management in the File Abstraction Layer
The File Abstraction Layer (FAL) in TYPO3 6.0.x before 6.0.9 and 6.1.x before 6.1.4 does not properly check permissions, which allows remote authenticated users to create or read arbitrary files via a crafted URL.
Aliases
0
alias CVE-2013-4320
1
alias GHSA-p9jg-9w87-6rg4
Fixed_packages
Affected_packages
0
url pkg:composer/typo3/cms-core@6.0.0
purl pkg:composer/typo3/cms-core@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3gdb-nxp2-afgk
1
vulnerability VCID-75re-n41m-y3et
2
vulnerability VCID-8ahj-xadv-xbhr
3
vulnerability VCID-aeeg-apyz-huda
4
vulnerability VCID-bbrf-qfw6-w3fx
5
vulnerability VCID-ftr5-c6nt-gbh4
6
vulnerability VCID-mz1q-ugmv-4ban
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@6.0.0
1
url pkg:composer/typo3/cms-core@6.1.0
purl pkg:composer/typo3/cms-core@6.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-75re-n41m-y3et
1
vulnerability VCID-8ahj-xadv-xbhr
2
vulnerability VCID-aeeg-apyz-huda
3
vulnerability VCID-bbrf-qfw6-w3fx
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms-core@6.1.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4320
reference_id
reference_type
scores
0
value 0.00129
scoring_system epss
scoring_elements 0.32379
published_at 2026-04-21T12:55:00Z
1
value 0.00129
scoring_system epss
scoring_elements 0.32422
published_at 2026-04-12T12:55:00Z
2
value 0.00129
scoring_system epss
scoring_elements 0.32394
published_at 2026-04-13T12:55:00Z
3
value 0.00129
scoring_system epss
scoring_elements 0.3243
published_at 2026-04-16T12:55:00Z
4
value 0.00129
scoring_system epss
scoring_elements 0.32408
published_at 2026-04-18T12:55:00Z
5
value 0.00129
scoring_system epss
scoring_elements 0.32372
published_at 2026-04-01T12:55:00Z
6
value 0.00129
scoring_system epss
scoring_elements 0.32521
published_at 2026-04-02T12:55:00Z
7
value 0.00129
scoring_system epss
scoring_elements 0.32557
published_at 2026-04-04T12:55:00Z
8
value 0.00129
scoring_system epss
scoring_elements 0.3238
published_at 2026-04-07T12:55:00Z
9
value 0.00129
scoring_system epss
scoring_elements 0.32429
published_at 2026-04-08T12:55:00Z
10
value 0.00129
scoring_system epss
scoring_elements 0.32456
published_at 2026-04-09T12:55:00Z
11
value 0.00129
scoring_system epss
scoring_elements 0.3246
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4320
1
reference_url https://github.com/TYPO3-CMS/core
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/TYPO3-CMS/core
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4320
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-4320
3
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003
4
reference_url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/
reference_id
reference_type
scores
url https://typo3.org/teams/security/security-bulletins/typo3-core/typo3-core-sa-2013-003/
5
reference_url https://github.com/advisories/GHSA-p9jg-9w87-6rg4
reference_id GHSA-p9jg-9w87-6rg4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p9jg-9w87-6rg4
Weaknesses
0
cwe_id 284
name Improper Access Control
description The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 264
name Permissions, Privileges, and Access Controls
description Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-aeeg-apyz-huda