Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-b3hg-mjga-nbg1

Summary inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

Aliases

alias	CVE-2016-1000107

Fixed_packages

url	pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.1%252Bdfsg-1%252Bdeb13u1%3Fdistro=trixie

url pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2?distro=trixie

purl pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-aqqx-g7d3-1yfy

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-n6dc-39d1-83cr

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.1%252Bdfsg-1%252Bdeb13u2%3Fdistro=trixie

url pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2

purl pkg:deb/debian/erlang@1:27.3.4.1%2Bdfsg-1%2Bdeb13u2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-aqqx-g7d3-1yfy

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-n6dc-39d1-83cr

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.1%252Bdfsg-1%252Bdeb13u2

url	pkg:deb/debian/erlang@1:27.3.4.3%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.3%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.3%252Bdfsg-1%3Fdistro=trixie

url	pkg:deb/debian/erlang@1:27.3.4.12%2Bdfsg-1?distro=trixie
purl	pkg:deb/debian/erlang@1:27.3.4.12%2Bdfsg-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:27.3.4.12%252Bdfsg-1%3Fdistro=trixie

Affected_packages

url pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1

purl pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-dccw-cx8r-r7a1

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

vulnerability	VCID-yyfx-f783-fqgk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:23.2.6%252Bdfsg-1%252Bdeb11u1

url pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1?distro=trixie

purl pkg:deb/debian/erlang@1:23.2.6%2Bdfsg-1%2Bdeb11u1?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-dccw-cx8r-r7a1

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

vulnerability	VCID-yyfx-f783-fqgk

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:23.2.6%252Bdfsg-1%252Bdeb11u1%3Fdistro=trixie

url pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4?distro=trixie

purl pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:25.2.3%252Bdfsg-1%252Bdeb12u4%3Fdistro=trixie

url pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4

purl pkg:deb/debian/erlang@1:25.2.3%2Bdfsg-1%2Bdeb12u4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-2uh8-nhph-gfb6

vulnerability	VCID-883b-48uw-6yag

vulnerability	VCID-b3hg-mjga-nbg1

vulnerability	VCID-dazh-ypb5-akfp

vulnerability	VCID-ryy7-f45d-yyhv

vulnerability	VCID-wsby-unw4-zqe7

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/erlang@1:25.2.3%252Bdfsg-1%252Bdeb12u4

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000107.json

reference_id

reference_type

scores

value	6.1
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1000107.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2016-1000107

reference_id

reference_type

scores

value	0.00399
scoring_system	epss
scoring_elements	0.60987
published_at	2026-06-04T12:55:00Z

value	0.00399
scoring_system	epss
scoring_elements	0.61036
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2016-1000107

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000107
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000107

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	5
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:N/I:P/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115086
reference_id	1115086
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1115086

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1824460
reference_id	1824460
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1824460

Weaknesses

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Exploits

Severity_range_score 5.0 - 6.1

Exploitability 0.5

Weighted_severity 5.5

Risk_score 2.8

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b3hg-mjga-nbg1

Vulnerability Instance