Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-j7jf-zzvz-skgm
SummaryThe XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other products allow remote attackers to cause a denial of service (resource consumption and crash) via an XML Entity Expansion (XEE) attack.
Aliases
0
alias CVE-2013-1664
1
alias GHSA-qrh7-x6fp-c2mp
Fixed_packages
0
url pkg:deb/debian/cinder@2012.2.3-1?distro=trixie
purl pkg:deb/debian/cinder@2012.2.3-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2012.2.3-1%3Fdistro=trixie
1
url pkg:deb/debian/cinder@2:17.0.1-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/cinder@2:17.0.1-1%2Bdeb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:17.0.1-1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/cinder@2:21.3.1-1~deb12u1?distro=trixie
purl pkg:deb/debian/cinder@2:21.3.1-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:21.3.1-1~deb12u1%3Fdistro=trixie
3
url pkg:deb/debian/cinder@2:26.0.0-2?distro=trixie
purl pkg:deb/debian/cinder@2:26.0.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:26.0.0-2%3Fdistro=trixie
4
url pkg:deb/debian/cinder@2:28.0.0-1?distro=trixie
purl pkg:deb/debian/cinder@2:28.0.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cinder@2:28.0.0-1%3Fdistro=trixie
5
url pkg:deb/debian/keystone@2012.1.1-13?distro=trixie
purl pkg:deb/debian/keystone@2012.1.1-13?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2012.1.1-13%3Fdistro=trixie
6
url pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/keystone@2:18.0.0-3%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-g2mr-xac1-jue9
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:18.0.0-3%252Bdeb11u1%3Fdistro=trixie
7
url pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/keystone@2:22.0.2-0%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ucj-ubyb-27fx
1
vulnerability VCID-7b5p-zqzm-3few
2
vulnerability VCID-cage-qr17-fude
3
vulnerability VCID-eszc-r2p1-xkcv
4
vulnerability VCID-g2mr-xac1-jue9
5
vulnerability VCID-hyts-mq72-z7de
6
vulnerability VCID-v6q4-3362-fyde
7
vulnerability VCID-z3ub-exq4-4qgg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:22.0.2-0%252Bdeb12u1%3Fdistro=trixie
8
url pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/keystone@2:27.0.0-3%2Bdeb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5ucj-ubyb-27fx
1
vulnerability VCID-7b5p-zqzm-3few
2
vulnerability VCID-cage-qr17-fude
3
vulnerability VCID-eszc-r2p1-xkcv
4
vulnerability VCID-hyts-mq72-z7de
5
vulnerability VCID-v6q4-3362-fyde
6
vulnerability VCID-z3ub-exq4-4qgg
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:27.0.0-3%252Bdeb13u1%3Fdistro=trixie
9
url pkg:deb/debian/keystone@2:29.0.1-2?distro=trixie
purl pkg:deb/debian/keystone@2:29.0.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/keystone@2:29.0.1-2%3Fdistro=trixie
10
url pkg:deb/debian/nova@2012.1.1-13?distro=trixie
purl pkg:deb/debian/nova@2012.1.1-13?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2012.1.1-13%3Fdistro=trixie
11
url pkg:deb/debian/nova@2:22.0.1-2%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/nova@2:22.0.1-2%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1p6r-bchy-pfdv
1
vulnerability VCID-gz88-fmm2-1yd7
2
vulnerability VCID-ttgr-j3ja-cbba
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:22.0.1-2%252Bdeb11u1%3Fdistro=trixie
12
url pkg:deb/debian/nova@2:26.2.2-1~deb12u4?distro=trixie
purl pkg:deb/debian/nova@2:26.2.2-1~deb12u4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:26.2.2-1~deb12u4%3Fdistro=trixie
13
url pkg:deb/debian/nova@2:31.0.0-6%2Bdeb13u2?distro=trixie
purl pkg:deb/debian/nova@2:31.0.0-6%2Bdeb13u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:31.0.0-6%252Bdeb13u2%3Fdistro=trixie
14
url pkg:deb/debian/nova@2:33.0.1-2?distro=trixie
purl pkg:deb/debian/nova@2:33.0.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.1-2%3Fdistro=trixie
15
url pkg:ebuild/app-emulation/emul-linux-x86-baselibs@20140406-r1
purl pkg:ebuild/app-emulation/emul-linux-x86-baselibs@20140406-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/app-emulation/emul-linux-x86-baselibs@20140406-r1
16
url pkg:ebuild/dev-libs/libxml2@2.9.1-r1
purl pkg:ebuild/dev-libs/libxml2@2.9.1-r1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-libs/libxml2@2.9.1-r1
17
url pkg:pypi/django@1.3.6
purl pkg:pypi/django@1.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3kza-a88p-kfg7
2
vulnerability VCID-3sg7-t77d-rkc6
3
vulnerability VCID-4tyd-97z5-z3ar
4
vulnerability VCID-5q58-pzt4-8uey
5
vulnerability VCID-5vmb-d4xp-zfgy
6
vulnerability VCID-6w99-8w84-jkh9
7
vulnerability VCID-6wah-r8vr-5qc4
8
vulnerability VCID-7rz2-nqdn-hycc
9
vulnerability VCID-8gus-er59-1qak
10
vulnerability VCID-8v2c-7739-2ugp
11
vulnerability VCID-912q-3eks-4yfm
12
vulnerability VCID-9mpt-zxaw-kkeg
13
vulnerability VCID-bahz-gfxv-e3b2
14
vulnerability VCID-bb8b-hq41-s7a6
15
vulnerability VCID-dh12-js4b-h7fw
16
vulnerability VCID-ffsr-th58-p3ct
17
vulnerability VCID-ga69-9y5g-77c3
18
vulnerability VCID-jfya-694v-myar
19
vulnerability VCID-ksh8-pazn-dbca
20
vulnerability VCID-mccp-khb9-qkb7
21
vulnerability VCID-r7tk-79xy-jkhj
22
vulnerability VCID-rq19-9v21-47dy
23
vulnerability VCID-rxxr-sseq-k7a9
24
vulnerability VCID-ta66-7qrm-sbhu
25
vulnerability VCID-u4a7-uvcb-9kf8
26
vulnerability VCID-u6sd-648r-qbdb
27
vulnerability VCID-vdpf-jddk-syda
28
vulnerability VCID-weqb-fxu4-17e7
29
vulnerability VCID-whgc-pt2s-77ar
30
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.6
18
url pkg:pypi/django@1.4.4
purl pkg:pypi/django@1.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-4tyd-97z5-z3ar
5
vulnerability VCID-5q58-pzt4-8uey
6
vulnerability VCID-5vmb-d4xp-zfgy
7
vulnerability VCID-6w99-8w84-jkh9
8
vulnerability VCID-6wah-r8vr-5qc4
9
vulnerability VCID-71t1-69yq-c7h6
10
vulnerability VCID-7rz2-nqdn-hycc
11
vulnerability VCID-8gus-er59-1qak
12
vulnerability VCID-8v2c-7739-2ugp
13
vulnerability VCID-912q-3eks-4yfm
14
vulnerability VCID-9bqp-b6rw-mye7
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-g2z3-2h8p-c7ge
21
vulnerability VCID-ga69-9y5g-77c3
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-kq8u-td31-uqaa
24
vulnerability VCID-ksh8-pazn-dbca
25
vulnerability VCID-mccp-khb9-qkb7
26
vulnerability VCID-ps24-pjj4-uqd1
27
vulnerability VCID-r7tk-79xy-jkhj
28
vulnerability VCID-rq19-9v21-47dy
29
vulnerability VCID-rtjn-qccc-8kc7
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-th75-ys47-d3h8
33
vulnerability VCID-u4a7-uvcb-9kf8
34
vulnerability VCID-u6sd-648r-qbdb
35
vulnerability VCID-vdpf-jddk-syda
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-x212-mskt-9bbw
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.4
Affected_packages
0
url pkg:pypi/django@1.3
purl pkg:pypi/django@1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-38e1-hepp-vkg9
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5brz-383w-pfbb
8
vulnerability VCID-5dxz-7swx-rygn
9
vulnerability VCID-5q58-pzt4-8uey
10
vulnerability VCID-5vmb-d4xp-zfgy
11
vulnerability VCID-66ax-8wdn-1bgb
12
vulnerability VCID-6w99-8w84-jkh9
13
vulnerability VCID-6wah-r8vr-5qc4
14
vulnerability VCID-7g7m-bfe1-wkhd
15
vulnerability VCID-7rz2-nqdn-hycc
16
vulnerability VCID-8gus-er59-1qak
17
vulnerability VCID-8v2c-7739-2ugp
18
vulnerability VCID-912q-3eks-4yfm
19
vulnerability VCID-9bsf-vm3b-ubhw
20
vulnerability VCID-9mpt-zxaw-kkeg
21
vulnerability VCID-bahz-gfxv-e3b2
22
vulnerability VCID-bb8b-hq41-s7a6
23
vulnerability VCID-dh12-js4b-h7fw
24
vulnerability VCID-ffsr-th58-p3ct
25
vulnerability VCID-ga69-9y5g-77c3
26
vulnerability VCID-j7jf-zzvz-skgm
27
vulnerability VCID-jfya-694v-myar
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-qu99-yudm-57fp
31
vulnerability VCID-r7tk-79xy-jkhj
32
vulnerability VCID-rq19-9v21-47dy
33
vulnerability VCID-rxxr-sseq-k7a9
34
vulnerability VCID-ta66-7qrm-sbhu
35
vulnerability VCID-u4a7-uvcb-9kf8
36
vulnerability VCID-u5u9-xbb6-93hc
37
vulnerability VCID-u6sd-648r-qbdb
38
vulnerability VCID-vdpf-jddk-syda
39
vulnerability VCID-vj5u-2ukv-audq
40
vulnerability VCID-weqb-fxu4-17e7
41
vulnerability VCID-whgc-pt2s-77ar
42
vulnerability VCID-xf2n-qua7-m7fb
43
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3
1
url pkg:pypi/django@1.3.0
purl pkg:pypi/django@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j7jf-zzvz-skgm
1
vulnerability VCID-qu99-yudm-57fp
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.0
2
url pkg:pypi/django@1.3.1
purl pkg:pypi/django@1.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7g7m-bfe1-wkhd
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bsf-vm3b-ubhw
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-ga69-9y5g-77c3
23
vulnerability VCID-j7jf-zzvz-skgm
24
vulnerability VCID-jfya-694v-myar
25
vulnerability VCID-ksh8-pazn-dbca
26
vulnerability VCID-mccp-khb9-qkb7
27
vulnerability VCID-qu99-yudm-57fp
28
vulnerability VCID-r7tk-79xy-jkhj
29
vulnerability VCID-rq19-9v21-47dy
30
vulnerability VCID-rxxr-sseq-k7a9
31
vulnerability VCID-ta66-7qrm-sbhu
32
vulnerability VCID-u4a7-uvcb-9kf8
33
vulnerability VCID-u6sd-648r-qbdb
34
vulnerability VCID-vdpf-jddk-syda
35
vulnerability VCID-vj5u-2ukv-audq
36
vulnerability VCID-weqb-fxu4-17e7
37
vulnerability VCID-whgc-pt2s-77ar
38
vulnerability VCID-xf2n-qua7-m7fb
39
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.1
3
url pkg:pypi/django@1.3.2
purl pkg:pypi/django@1.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.2
4
url pkg:pypi/django@1.3.3
purl pkg:pypi/django@1.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5dxz-7swx-rygn
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-7rz2-nqdn-hycc
12
vulnerability VCID-8gus-er59-1qak
13
vulnerability VCID-8v2c-7739-2ugp
14
vulnerability VCID-912q-3eks-4yfm
15
vulnerability VCID-9mpt-zxaw-kkeg
16
vulnerability VCID-bahz-gfxv-e3b2
17
vulnerability VCID-bb8b-hq41-s7a6
18
vulnerability VCID-dh12-js4b-h7fw
19
vulnerability VCID-ffsr-th58-p3ct
20
vulnerability VCID-ga69-9y5g-77c3
21
vulnerability VCID-j7jf-zzvz-skgm
22
vulnerability VCID-jfya-694v-myar
23
vulnerability VCID-ksh8-pazn-dbca
24
vulnerability VCID-mccp-khb9-qkb7
25
vulnerability VCID-qu99-yudm-57fp
26
vulnerability VCID-r7tk-79xy-jkhj
27
vulnerability VCID-rq19-9v21-47dy
28
vulnerability VCID-rxxr-sseq-k7a9
29
vulnerability VCID-ta66-7qrm-sbhu
30
vulnerability VCID-u4a7-uvcb-9kf8
31
vulnerability VCID-u6sd-648r-qbdb
32
vulnerability VCID-vdpf-jddk-syda
33
vulnerability VCID-weqb-fxu4-17e7
34
vulnerability VCID-whgc-pt2s-77ar
35
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.3
5
url pkg:pypi/django@1.3.4
purl pkg:pypi/django@1.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-6w99-8w84-jkh9
9
vulnerability VCID-6wah-r8vr-5qc4
10
vulnerability VCID-7rz2-nqdn-hycc
11
vulnerability VCID-8gus-er59-1qak
12
vulnerability VCID-8v2c-7739-2ugp
13
vulnerability VCID-912q-3eks-4yfm
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-j7jf-zzvz-skgm
21
vulnerability VCID-jfya-694v-myar
22
vulnerability VCID-ksh8-pazn-dbca
23
vulnerability VCID-mccp-khb9-qkb7
24
vulnerability VCID-qu99-yudm-57fp
25
vulnerability VCID-r7tk-79xy-jkhj
26
vulnerability VCID-rq19-9v21-47dy
27
vulnerability VCID-rxxr-sseq-k7a9
28
vulnerability VCID-ta66-7qrm-sbhu
29
vulnerability VCID-u4a7-uvcb-9kf8
30
vulnerability VCID-u6sd-648r-qbdb
31
vulnerability VCID-vdpf-jddk-syda
32
vulnerability VCID-weqb-fxu4-17e7
33
vulnerability VCID-whgc-pt2s-77ar
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.4
6
url pkg:pypi/django@1.3.5
purl pkg:pypi/django@1.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-29qk-rv5n-efbm
1
vulnerability VCID-3juv-mecf-akdp
2
vulnerability VCID-3kza-a88p-kfg7
3
vulnerability VCID-3sg7-t77d-rkc6
4
vulnerability VCID-492e-xffn-3bds
5
vulnerability VCID-4tyd-97z5-z3ar
6
vulnerability VCID-5q58-pzt4-8uey
7
vulnerability VCID-5vmb-d4xp-zfgy
8
vulnerability VCID-6w99-8w84-jkh9
9
vulnerability VCID-6wah-r8vr-5qc4
10
vulnerability VCID-7rz2-nqdn-hycc
11
vulnerability VCID-8gus-er59-1qak
12
vulnerability VCID-8v2c-7739-2ugp
13
vulnerability VCID-912q-3eks-4yfm
14
vulnerability VCID-9mpt-zxaw-kkeg
15
vulnerability VCID-bahz-gfxv-e3b2
16
vulnerability VCID-bb8b-hq41-s7a6
17
vulnerability VCID-dh12-js4b-h7fw
18
vulnerability VCID-ffsr-th58-p3ct
19
vulnerability VCID-ga69-9y5g-77c3
20
vulnerability VCID-j7jf-zzvz-skgm
21
vulnerability VCID-jfya-694v-myar
22
vulnerability VCID-ksh8-pazn-dbca
23
vulnerability VCID-mccp-khb9-qkb7
24
vulnerability VCID-qu99-yudm-57fp
25
vulnerability VCID-r7tk-79xy-jkhj
26
vulnerability VCID-rq19-9v21-47dy
27
vulnerability VCID-rxxr-sseq-k7a9
28
vulnerability VCID-ta66-7qrm-sbhu
29
vulnerability VCID-u4a7-uvcb-9kf8
30
vulnerability VCID-u6sd-648r-qbdb
31
vulnerability VCID-vdpf-jddk-syda
32
vulnerability VCID-weqb-fxu4-17e7
33
vulnerability VCID-whgc-pt2s-77ar
34
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.3.5
7
url pkg:pypi/django@1.4
purl pkg:pypi/django@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5dxz-7swx-rygn
8
vulnerability VCID-5q58-pzt4-8uey
9
vulnerability VCID-5vmb-d4xp-zfgy
10
vulnerability VCID-6w99-8w84-jkh9
11
vulnerability VCID-6wah-r8vr-5qc4
12
vulnerability VCID-71t1-69yq-c7h6
13
vulnerability VCID-7g7m-bfe1-wkhd
14
vulnerability VCID-7rz2-nqdn-hycc
15
vulnerability VCID-8gus-er59-1qak
16
vulnerability VCID-8v2c-7739-2ugp
17
vulnerability VCID-912q-3eks-4yfm
18
vulnerability VCID-9bqp-b6rw-mye7
19
vulnerability VCID-9bsf-vm3b-ubhw
20
vulnerability VCID-9mpt-zxaw-kkeg
21
vulnerability VCID-bahz-gfxv-e3b2
22
vulnerability VCID-bb8b-hq41-s7a6
23
vulnerability VCID-dh12-js4b-h7fw
24
vulnerability VCID-ffsr-th58-p3ct
25
vulnerability VCID-g2z3-2h8p-c7ge
26
vulnerability VCID-ga69-9y5g-77c3
27
vulnerability VCID-j7jf-zzvz-skgm
28
vulnerability VCID-jfya-694v-myar
29
vulnerability VCID-kq8u-td31-uqaa
30
vulnerability VCID-ksh8-pazn-dbca
31
vulnerability VCID-mccp-khb9-qkb7
32
vulnerability VCID-ps24-pjj4-uqd1
33
vulnerability VCID-qu99-yudm-57fp
34
vulnerability VCID-r7tk-79xy-jkhj
35
vulnerability VCID-rq19-9v21-47dy
36
vulnerability VCID-rtjn-qccc-8kc7
37
vulnerability VCID-rxxr-sseq-k7a9
38
vulnerability VCID-ta66-7qrm-sbhu
39
vulnerability VCID-th75-ys47-d3h8
40
vulnerability VCID-u4a7-uvcb-9kf8
41
vulnerability VCID-u6sd-648r-qbdb
42
vulnerability VCID-vdpf-jddk-syda
43
vulnerability VCID-vj5u-2ukv-audq
44
vulnerability VCID-weqb-fxu4-17e7
45
vulnerability VCID-whgc-pt2s-77ar
46
vulnerability VCID-x212-mskt-9bbw
47
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4
8
url pkg:pypi/django@1.4.0
purl pkg:pypi/django@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j7jf-zzvz-skgm
1
vulnerability VCID-qu99-yudm-57fp
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.0
9
url pkg:pypi/django@1.4.1
purl pkg:pypi/django@1.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5dxz-7swx-rygn
8
vulnerability VCID-5q58-pzt4-8uey
9
vulnerability VCID-5vmb-d4xp-zfgy
10
vulnerability VCID-6w99-8w84-jkh9
11
vulnerability VCID-6wah-r8vr-5qc4
12
vulnerability VCID-71t1-69yq-c7h6
13
vulnerability VCID-7rz2-nqdn-hycc
14
vulnerability VCID-8gus-er59-1qak
15
vulnerability VCID-8v2c-7739-2ugp
16
vulnerability VCID-912q-3eks-4yfm
17
vulnerability VCID-9bqp-b6rw-mye7
18
vulnerability VCID-9mpt-zxaw-kkeg
19
vulnerability VCID-bahz-gfxv-e3b2
20
vulnerability VCID-bb8b-hq41-s7a6
21
vulnerability VCID-dh12-js4b-h7fw
22
vulnerability VCID-ffsr-th58-p3ct
23
vulnerability VCID-g2z3-2h8p-c7ge
24
vulnerability VCID-ga69-9y5g-77c3
25
vulnerability VCID-j7jf-zzvz-skgm
26
vulnerability VCID-jfya-694v-myar
27
vulnerability VCID-kq8u-td31-uqaa
28
vulnerability VCID-ksh8-pazn-dbca
29
vulnerability VCID-mccp-khb9-qkb7
30
vulnerability VCID-ps24-pjj4-uqd1
31
vulnerability VCID-qu99-yudm-57fp
32
vulnerability VCID-r7tk-79xy-jkhj
33
vulnerability VCID-rq19-9v21-47dy
34
vulnerability VCID-rtjn-qccc-8kc7
35
vulnerability VCID-rxxr-sseq-k7a9
36
vulnerability VCID-ta66-7qrm-sbhu
37
vulnerability VCID-th75-ys47-d3h8
38
vulnerability VCID-u4a7-uvcb-9kf8
39
vulnerability VCID-u6sd-648r-qbdb
40
vulnerability VCID-vdpf-jddk-syda
41
vulnerability VCID-weqb-fxu4-17e7
42
vulnerability VCID-whgc-pt2s-77ar
43
vulnerability VCID-x212-mskt-9bbw
44
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.1
10
url pkg:pypi/django@1.4.2
purl pkg:pypi/django@1.4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-71t1-69yq-c7h6
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bqp-b6rw-mye7
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-g2z3-2h8p-c7ge
23
vulnerability VCID-ga69-9y5g-77c3
24
vulnerability VCID-j7jf-zzvz-skgm
25
vulnerability VCID-jfya-694v-myar
26
vulnerability VCID-kq8u-td31-uqaa
27
vulnerability VCID-ksh8-pazn-dbca
28
vulnerability VCID-mccp-khb9-qkb7
29
vulnerability VCID-ps24-pjj4-uqd1
30
vulnerability VCID-qu99-yudm-57fp
31
vulnerability VCID-r7tk-79xy-jkhj
32
vulnerability VCID-rq19-9v21-47dy
33
vulnerability VCID-rtjn-qccc-8kc7
34
vulnerability VCID-rxxr-sseq-k7a9
35
vulnerability VCID-ta66-7qrm-sbhu
36
vulnerability VCID-th75-ys47-d3h8
37
vulnerability VCID-u4a7-uvcb-9kf8
38
vulnerability VCID-u6sd-648r-qbdb
39
vulnerability VCID-vdpf-jddk-syda
40
vulnerability VCID-weqb-fxu4-17e7
41
vulnerability VCID-whgc-pt2s-77ar
42
vulnerability VCID-x212-mskt-9bbw
43
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.2
11
url pkg:pypi/django@1.4.3
purl pkg:pypi/django@1.4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12d7-vc63-rkdy
1
vulnerability VCID-29qk-rv5n-efbm
2
vulnerability VCID-3juv-mecf-akdp
3
vulnerability VCID-3kza-a88p-kfg7
4
vulnerability VCID-3sg7-t77d-rkc6
5
vulnerability VCID-492e-xffn-3bds
6
vulnerability VCID-4tyd-97z5-z3ar
7
vulnerability VCID-5q58-pzt4-8uey
8
vulnerability VCID-5vmb-d4xp-zfgy
9
vulnerability VCID-6w99-8w84-jkh9
10
vulnerability VCID-6wah-r8vr-5qc4
11
vulnerability VCID-71t1-69yq-c7h6
12
vulnerability VCID-7rz2-nqdn-hycc
13
vulnerability VCID-8gus-er59-1qak
14
vulnerability VCID-8v2c-7739-2ugp
15
vulnerability VCID-912q-3eks-4yfm
16
vulnerability VCID-9bqp-b6rw-mye7
17
vulnerability VCID-9mpt-zxaw-kkeg
18
vulnerability VCID-bahz-gfxv-e3b2
19
vulnerability VCID-bb8b-hq41-s7a6
20
vulnerability VCID-dh12-js4b-h7fw
21
vulnerability VCID-ffsr-th58-p3ct
22
vulnerability VCID-g2z3-2h8p-c7ge
23
vulnerability VCID-ga69-9y5g-77c3
24
vulnerability VCID-j7jf-zzvz-skgm
25
vulnerability VCID-jfya-694v-myar
26
vulnerability VCID-kq8u-td31-uqaa
27
vulnerability VCID-ksh8-pazn-dbca
28
vulnerability VCID-mccp-khb9-qkb7
29
vulnerability VCID-ps24-pjj4-uqd1
30
vulnerability VCID-qu99-yudm-57fp
31
vulnerability VCID-r7tk-79xy-jkhj
32
vulnerability VCID-rq19-9v21-47dy
33
vulnerability VCID-rtjn-qccc-8kc7
34
vulnerability VCID-rxxr-sseq-k7a9
35
vulnerability VCID-ta66-7qrm-sbhu
36
vulnerability VCID-th75-ys47-d3h8
37
vulnerability VCID-u4a7-uvcb-9kf8
38
vulnerability VCID-u6sd-648r-qbdb
39
vulnerability VCID-vdpf-jddk-syda
40
vulnerability VCID-weqb-fxu4-17e7
41
vulnerability VCID-whgc-pt2s-77ar
42
vulnerability VCID-x212-mskt-9bbw
43
vulnerability VCID-ynt9-h6ww-h7e9
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.4.3
12
url pkg:rpm/redhat/Django14@1.4.4-1?arch=el6ost
purl pkg:rpm/redhat/Django14@1.4.4-1?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3juv-mecf-akdp
1
vulnerability VCID-492e-xffn-3bds
2
vulnerability VCID-j7jf-zzvz-skgm
3
vulnerability VCID-qu99-yudm-57fp
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/Django14@1.4.4-1%3Farch=el6ost
13
url pkg:rpm/redhat/openstack-cinder@2012.2.3-4?arch=el6ost
purl pkg:rpm/redhat/openstack-cinder@2012.2.3-4?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j7jf-zzvz-skgm
1
vulnerability VCID-qu99-yudm-57fp
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-cinder@2012.2.3-4%3Farch=el6ost
14
url pkg:rpm/redhat/openstack-keystone@2012.2.3-3?arch=el6ost
purl pkg:rpm/redhat/openstack-keystone@2012.2.3-3?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j7jf-zzvz-skgm
1
vulnerability VCID-qu99-yudm-57fp
2
vulnerability VCID-wdxs-m2kh-ybfw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-keystone@2012.2.3-3%3Farch=el6ost
15
url pkg:rpm/redhat/openstack-nova@2012.2.3-4?arch=el6ost
purl pkg:rpm/redhat/openstack-nova@2012.2.3-4?arch=el6ost
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j7jf-zzvz-skgm
1
vulnerability VCID-qu99-yudm-57fp
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2012.2.3-4%3Farch=el6ost
References
0
reference_url http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://blog.python.org/2013/02/announcing-defusedxml-fixes-for-xml.html
1
reference_url http://bugs.python.org/issue17239
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://bugs.python.org/issue17239
2
reference_url http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.openstack.org/pipermail/openstack-announce/2013-February/000078.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2013-0657.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0657.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2013-0658.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0658.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2013-0670.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0670.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1664.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-1664.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-1664
reference_id
reference_type
scores
0
value 0.03938
scoring_system epss
scoring_elements 0.88545
published_at 2026-06-04T12:55:00Z
1
value 0.03938
scoring_system epss
scoring_elements 0.88563
published_at 2026-06-08T12:55:00Z
2
value 0.03938
scoring_system epss
scoring_elements 0.88564
published_at 2026-06-07T12:55:00Z
3
value 0.03938
scoring_system epss
scoring_elements 0.88565
published_at 2026-06-06T12:55:00Z
4
value 0.03938
scoring_system epss
scoring_elements 0.88562
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-1664
8
reference_url https://bugs.launchpad.net/nova/+bug/1100282
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugs.launchpad.net/nova/+bug/1100282
9
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1664
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1664
10
reference_url https://github.com/django/django
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django
11
reference_url https://github.com/django/django/commit/1c60d07ba23e0350351c278ad28d0bd5aa410b40
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/1c60d07ba23e0350351c278ad28d0bd5aa410b40
12
reference_url https://github.com/django/django/commit/d19a27066b2247102e65412aa66917aff0091112
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/django/django/commit/d19a27066b2247102e65412aa66917aff0091112
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-1664
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-1664
14
reference_url http://ubuntu.com/usn/usn-1757-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-1757-1
15
reference_url http://www.openwall.com/lists/oss-security/2013/02/19/2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2013/02/19/2
16
reference_url http://www.openwall.com/lists/oss-security/2013/02/19/4
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2013/02/19/4
17
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700948
reference_id 700948
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700948
18
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700949
reference_id 700949
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700949
19
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700950
reference_id 700950
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700950
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=913808
reference_id 913808
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=913808
21
reference_url https://github.com/advisories/GHSA-qrh7-x6fp-c2mp
reference_id GHSA-qrh7-x6fp-c2mp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qrh7-x6fp-c2mp
22
reference_url https://security.gentoo.org/glsa/201311-06
reference_id GLSA-201311-06
reference_type
scores
url https://security.gentoo.org/glsa/201311-06
23
reference_url https://security.gentoo.org/glsa/201412-11
reference_id GLSA-201412-11
reference_type
scores
url https://security.gentoo.org/glsa/201412-11
24
reference_url https://access.redhat.com/errata/RHSA-2013:0596
reference_id RHSA-2013:0596
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0596
25
reference_url https://access.redhat.com/errata/RHSA-2013:0657
reference_id RHSA-2013:0657
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0657
26
reference_url https://access.redhat.com/errata/RHSA-2013:0658
reference_id RHSA-2013:0658
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0658
27
reference_url https://access.redhat.com/errata/RHSA-2013:0670
reference_id RHSA-2013:0670
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0670
28
reference_url https://usn.ubuntu.com/1730-1/
reference_id USN-1730-1
reference_type
scores
url https://usn.ubuntu.com/1730-1/
29
reference_url https://usn.ubuntu.com/1731-1/
reference_id USN-1731-1
reference_type
scores
url https://usn.ubuntu.com/1731-1/
30
reference_url https://usn.ubuntu.com/1734-1/
reference_id USN-1734-1
reference_type
scores
url https://usn.ubuntu.com/1734-1/
31
reference_url https://usn.ubuntu.com/1757-1/
reference_id USN-1757-1
reference_type
scores
url https://usn.ubuntu.com/1757-1/
Weaknesses
0
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-j7jf-zzvz-skgm