Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5n8q-zcds-gyen
Summarycmd/go: Go VCS Command Execution Vulnerability
Aliases
0
alias CVE-2025-4674
Fixed_packages
0
url pkg:apk/alpine/go@1.24.5-r0?arch=loongarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=loongarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=loongarch64&distroversion=edge&reponame=community
1
url pkg:apk/alpine/go@1.24.5-r0?arch=riscv64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=riscv64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=riscv64&distroversion=edge&reponame=community
2
url pkg:apk/alpine/go@1.24.5-r0?arch=s390x&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=s390x&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=s390x&distroversion=v3.23&reponame=community
3
url pkg:apk/alpine/go@1.24.5-r0?arch=armhf&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=armhf&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=armhf&distroversion=edge&reponame=community
4
url pkg:apk/alpine/go@1.24.5-r0?arch=loongarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=loongarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=loongarch64&distroversion=v3.23&reponame=community
5
url pkg:apk/alpine/go@1.24.5-r0?arch=x86&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=x86&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=x86&distroversion=edge&reponame=community
6
url pkg:apk/alpine/go@1.24.5-r0?arch=aarch64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=aarch64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=aarch64&distroversion=v3.23&reponame=community
7
url pkg:apk/alpine/go@1.24.5-r0?arch=armhf&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=armhf&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=armhf&distroversion=v3.23&reponame=community
8
url pkg:apk/alpine/go@1.24.5-r0?arch=armv7&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=armv7&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=armv7&distroversion=v3.23&reponame=community
9
url pkg:apk/alpine/go@1.24.5-r0?arch=ppc64le&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=ppc64le&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=ppc64le&distroversion=v3.23&reponame=community
10
url pkg:apk/alpine/go@1.24.5-r0?arch=riscv64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=riscv64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=riscv64&distroversion=v3.23&reponame=community
11
url pkg:apk/alpine/go@1.24.5-r0?arch=x86&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=x86&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=x86&distroversion=v3.23&reponame=community
12
url pkg:apk/alpine/go@1.24.5-r0?arch=x86_64&distroversion=v3.23&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=x86_64&distroversion=v3.23&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=x86_64&distroversion=v3.23&reponame=community
13
url pkg:apk/alpine/go@1.24.5-r0?arch=x86_64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=x86_64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=x86_64&distroversion=edge&reponame=community
14
url pkg:apk/alpine/go@1.24.5-r0?arch=armv7&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=armv7&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=armv7&distroversion=edge&reponame=community
15
url pkg:apk/alpine/go@1.24.5-r0?arch=ppc64le&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=ppc64le&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=ppc64le&distroversion=edge&reponame=community
16
url pkg:apk/alpine/go@1.24.5-r0?arch=s390x&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=s390x&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=s390x&distroversion=edge&reponame=community
17
url pkg:apk/alpine/go@1.24.5-r0?arch=aarch64&distroversion=edge&reponame=community
purl pkg:apk/alpine/go@1.24.5-r0?arch=aarch64&distroversion=edge&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.5-r0%3Farch=aarch64&distroversion=edge&reponame=community
18
url pkg:apk/alpine/go@1.24.6-r0?arch=aarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=aarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=aarch64&distroversion=v3.22&reponame=community
19
url pkg:apk/alpine/go@1.24.6-r0?arch=loongarch64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=loongarch64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=loongarch64&distroversion=v3.22&reponame=community
20
url pkg:apk/alpine/go@1.24.6-r0?arch=x86&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=x86&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86&distroversion=v3.22&reponame=community
21
url pkg:apk/alpine/go@1.24.6-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armv7&distroversion=v3.22&reponame=community
22
url pkg:apk/alpine/go@1.24.6-r0?arch=s390x&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=s390x&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=s390x&distroversion=v3.22&reponame=community
23
url pkg:apk/alpine/go@1.24.6-r0?arch=x86_64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=x86_64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=x86_64&distroversion=v3.22&reponame=community
24
url pkg:apk/alpine/go@1.24.6-r0?arch=armhf&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=armhf&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=armhf&distroversion=v3.22&reponame=community
25
url pkg:apk/alpine/go@1.24.6-r0?arch=ppc64le&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=ppc64le&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=ppc64le&distroversion=v3.22&reponame=community
26
url pkg:apk/alpine/go@1.24.6-r0?arch=riscv64&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/go@1.24.6-r0?arch=riscv64&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/go@1.24.6-r0%3Farch=riscv64&distroversion=v3.22&reponame=community
27
url pkg:deb/debian/golang-1.24@1.24.7-1?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.7-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.7-1%3Fdistro=trixie
28
url pkg:deb/debian/golang-1.24@1.24.9-1
purl pkg:deb/debian/golang-1.24@1.24.9-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.9-1
29
url pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.13-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.13-2%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie
purl pkg:deb/debian/golang-1.24@1.24.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-254d-pjst-c7hx
2
vulnerability VCID-3nqb-6mna-jyb4
3
vulnerability VCID-5n8q-zcds-gyen
4
vulnerability VCID-5q9b-a7c4-1yht
5
vulnerability VCID-7n3z-vwk2-3ydr
6
vulnerability VCID-9ky3-s2vk-cuge
7
vulnerability VCID-br2f-7ux9-hkhg
8
vulnerability VCID-bv1f-bee8-cbek
9
vulnerability VCID-csmt-e61b-tued
10
vulnerability VCID-dp1t-v58b-43du
11
vulnerability VCID-dtt9-gmqf-nbaf
12
vulnerability VCID-eyev-qpgs-hfbx
13
vulnerability VCID-hay4-q9m3-ekdj
14
vulnerability VCID-je6z-v5qw-ufew
15
vulnerability VCID-mvsr-c2yh-mbdq
16
vulnerability VCID-q9yj-ze4x-qyfr
17
vulnerability VCID-rvbr-nser-sfe7
18
vulnerability VCID-sb3w-x3yv-ffft
19
vulnerability VCID-t2dr-6dz3-7qgt
20
vulnerability VCID-usyf-s559-pkgx
21
vulnerability VCID-wchc-as62-1fae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1%3Fdistro=trixie
1
url pkg:deb/debian/golang-1.24@1.24.4-1
purl pkg:deb/debian/golang-1.24@1.24.4-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-254d-pjst-c7hx
2
vulnerability VCID-3nqb-6mna-jyb4
3
vulnerability VCID-5n8q-zcds-gyen
4
vulnerability VCID-5q9b-a7c4-1yht
5
vulnerability VCID-7n3z-vwk2-3ydr
6
vulnerability VCID-9ky3-s2vk-cuge
7
vulnerability VCID-br2f-7ux9-hkhg
8
vulnerability VCID-bv1f-bee8-cbek
9
vulnerability VCID-csmt-e61b-tued
10
vulnerability VCID-dp1t-v58b-43du
11
vulnerability VCID-dtt9-gmqf-nbaf
12
vulnerability VCID-eyev-qpgs-hfbx
13
vulnerability VCID-hay4-q9m3-ekdj
14
vulnerability VCID-je6z-v5qw-ufew
15
vulnerability VCID-mvsr-c2yh-mbdq
16
vulnerability VCID-q9yj-ze4x-qyfr
17
vulnerability VCID-rvbr-nser-sfe7
18
vulnerability VCID-sb3w-x3yv-ffft
19
vulnerability VCID-t2dr-6dz3-7qgt
20
vulnerability VCID-usyf-s559-pkgx
21
vulnerability VCID-wchc-as62-1fae
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/golang-1.24@1.24.4-1
2
url pkg:rpm/redhat/golang@1.19.13-18?arch=el9_2
purl pkg:rpm/redhat/golang@1.19.13-18?arch=el9_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5n8q-zcds-gyen
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.19.13-18%3Farch=el9_2
3
url pkg:rpm/redhat/golang@1.21.13-10?arch=el9_4
purl pkg:rpm/redhat/golang@1.21.13-10?arch=el9_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5n8q-zcds-gyen
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.21.13-10%3Farch=el9_4
4
url pkg:rpm/redhat/golang@1.24.6-1?arch=el10_0
purl pkg:rpm/redhat/golang@1.24.6-1?arch=el10_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-5n8q-zcds-gyen
2
vulnerability VCID-rvbr-nser-sfe7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.6-1%3Farch=el10_0
5
url pkg:rpm/redhat/golang@1.24.6-1?arch=el9_6
purl pkg:rpm/redhat/golang@1.24.6-1?arch=el9_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1aty-87pz-5yb8
1
vulnerability VCID-5n8q-zcds-gyen
2
vulnerability VCID-rvbr-nser-sfe7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/golang@1.24.6-1%3Farch=el9_6
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4674.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4674.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-4674
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00256
published_at 2026-04-02T12:55:00Z
1
value 5e-05
scoring_system epss
scoring_elements 0.00236
published_at 2026-04-13T12:55:00Z
2
value 5e-05
scoring_system epss
scoring_elements 0.00237
published_at 2026-04-12T12:55:00Z
3
value 5e-05
scoring_system epss
scoring_elements 0.00238
published_at 2026-04-11T12:55:00Z
4
value 5e-05
scoring_system epss
scoring_elements 0.00239
published_at 2026-04-08T12:55:00Z
5
value 5e-05
scoring_system epss
scoring_elements 0.00244
published_at 2026-04-04T12:55:00Z
6
value 5e-05
scoring_system epss
scoring_elements 0.00242
published_at 2026-04-07T12:55:00Z
7
value 6e-05
scoring_system epss
scoring_elements 0.00383
published_at 2026-04-21T12:55:00Z
8
value 6e-05
scoring_system epss
scoring_elements 0.00356
published_at 2026-04-16T12:55:00Z
9
value 6e-05
scoring_system epss
scoring_elements 0.0036
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-4674
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4674
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-4674
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109109
reference_id 1109109
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109109
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2384329
reference_id 2384329
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2384329
6
reference_url https://go.dev/cl/686515
reference_id 686515
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-06T16:03:21Z/
url https://go.dev/cl/686515
7
reference_url https://go.dev/issue/74380
reference_id 74380
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-06T16:03:21Z/
url https://go.dev/issue/74380
8
reference_url https://pkg.go.dev/vuln/GO-2025-3828
reference_id GO-2025-3828
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-06T16:03:21Z/
url https://pkg.go.dev/vuln/GO-2025-3828
9
reference_url https://groups.google.com/g/golang-announce/c/gTNJnDXmn34
reference_id gTNJnDXmn34
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-06T16:03:21Z/
url https://groups.google.com/g/golang-announce/c/gTNJnDXmn34
10
reference_url https://access.redhat.com/errata/RHSA-2025:13935
reference_id RHSA-2025:13935
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13935
11
reference_url https://access.redhat.com/errata/RHSA-2025:13936
reference_id RHSA-2025:13936
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13936
12
reference_url https://access.redhat.com/errata/RHSA-2025:13939
reference_id RHSA-2025:13939
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13939
13
reference_url https://access.redhat.com/errata/RHSA-2025:13940
reference_id RHSA-2025:13940
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13940
14
reference_url https://access.redhat.com/errata/RHSA-2025:13941
reference_id RHSA-2025:13941
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:13941
15
reference_url https://access.redhat.com/errata/RHSA-2025:14093
reference_id RHSA-2025:14093
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:14093
Weaknesses
0
cwe_id 74
name Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
description The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
1
cwe_id 73
name External Control of File Name or Path
description The product allows user input to control or influence paths or file names that are used in filesystem operations.
Exploits
Severity_range_score8.6 - 8.6
Exploitability0.5
Weighted_severity7.7
Risk_score3.9
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5n8q-zcds-gyen