Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-htwm-7xz4-q3c7
Summarymod_security: Libmodsecurity3 has possible bypass of encoded HTML entities
Aliases
0
alias CVE-2025-27110
Fixed_packages
0
url pkg:deb/debian/modsecurity@0?distro=trixie
purl pkg:deb/debian/modsecurity@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/modsecurity@0%3Fdistro=trixie
1
url pkg:deb/debian/modsecurity@3.0.4-2?distro=trixie
purl pkg:deb/debian/modsecurity@3.0.4-2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-93qw-yjha-tyce
1
vulnerability VCID-azf2-ue64-y7eb
2
vulnerability VCID-kg7a-8fqh-mffc
3
vulnerability VCID-y8ty-2cp5-y3gm
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/modsecurity@3.0.4-2%3Fdistro=trixie
2
url pkg:deb/debian/modsecurity@3.0.9-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/modsecurity@3.0.9-1%2Bdeb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-93qw-yjha-tyce
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/modsecurity@3.0.9-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/modsecurity@3.0.14-1?distro=trixie
purl pkg:deb/debian/modsecurity@3.0.14-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/modsecurity@3.0.14-1%3Fdistro=trixie
Affected_packages
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27110.json
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27110.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27110
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34802
published_at 2026-04-04T12:55:00Z
1
value 0.00144
scoring_system epss
scoring_elements 0.34776
published_at 2026-04-02T12:55:00Z
2
value 0.00274
scoring_system epss
scoring_elements 0.5088
published_at 2026-04-21T12:55:00Z
3
value 0.00274
scoring_system epss
scoring_elements 0.50895
published_at 2026-04-11T12:55:00Z
4
value 0.00274
scoring_system epss
scoring_elements 0.50872
published_at 2026-04-12T12:55:00Z
5
value 0.00274
scoring_system epss
scoring_elements 0.50857
published_at 2026-04-13T12:55:00Z
6
value 0.00274
scoring_system epss
scoring_elements 0.50894
published_at 2026-04-16T12:55:00Z
7
value 0.00274
scoring_system epss
scoring_elements 0.50901
published_at 2026-04-18T12:55:00Z
8
value 0.00274
scoring_system epss
scoring_elements 0.50799
published_at 2026-04-07T12:55:00Z
9
value 0.00274
scoring_system epss
scoring_elements 0.50856
published_at 2026-04-08T12:55:00Z
10
value 0.00274
scoring_system epss
scoring_elements 0.50854
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27110
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098910
reference_id 1098910
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098910
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2347591
reference_id 2347591
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2347591
5
reference_url https://github.com/owasp-modsecurity/ModSecurity/issues/3340
reference_id 3340
reference_type
scores
0
value 7.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-26T16:37:26Z/
url https://github.com/owasp-modsecurity/ModSecurity/issues/3340
6
reference_url https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-42w7-rmv5-4x2j
reference_id GHSA-42w7-rmv5-4x2j
reference_type
scores
0
value 7.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-26T16:37:26Z/
url https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-42w7-rmv5-4x2j
Weaknesses
0
cwe_id 172
name Encoding Error
description The product does not properly encode or decode the data, resulting in unexpected values.
Exploits
Severity_range_score7.9 - 8.6
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-htwm-7xz4-q3c7