GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/7327?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/7327?format=api",
    "vulnerability_id": "VCID-x33t-tqwv-vygf",
    "summary": "The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the session key.",
    "aliases": [
        {
            "alias": "CVE-2015-3982"
        },
        {
            "alias": "GHSA-6wgp-fwfm-mxp3"
        },
        {
            "alias": "PYSEC-2015-19"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203806?format=api",
            "purl": "pkg:deb/debian/python-django@0?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@0%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203793?format=api",
            "purl": "pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-32d1-b8f2-hud5"
                },
                {
                    "vulnerability": "VCID-3ccr-92q5-aqfk"
                },
                {
                    "vulnerability": "VCID-63c7-mkxw-ufav"
                },
                {
                    "vulnerability": "VCID-92z2-3rbz-77h9"
                },
                {
                    "vulnerability": "VCID-ape9-66ck-nfez"
                },
                {
                    "vulnerability": "VCID-cg44-thdw-cygg"
                },
                {
                    "vulnerability": "VCID-dac4-fa2z-bkdq"
                },
                {
                    "vulnerability": "VCID-g22z-jue5-8udz"
                },
                {
                    "vulnerability": "VCID-heum-8mwz-sbcw"
                },
                {
                    "vulnerability": "VCID-j2uz-w2ur-7ud4"
                },
                {
                    "vulnerability": "VCID-jt9m-kd3k-uqca"
                },
                {
                    "vulnerability": "VCID-q4cv-2m7d-3qd5"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203791?format=api",
            "purl": "pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-32d1-b8f2-hud5"
                },
                {
                    "vulnerability": "VCID-3ccr-92q5-aqfk"
                },
                {
                    "vulnerability": "VCID-63c7-mkxw-ufav"
                },
                {
                    "vulnerability": "VCID-92z2-3rbz-77h9"
                },
                {
                    "vulnerability": "VCID-ape9-66ck-nfez"
                },
                {
                    "vulnerability": "VCID-cg44-thdw-cygg"
                },
                {
                    "vulnerability": "VCID-dac4-fa2z-bkdq"
                },
                {
                    "vulnerability": "VCID-g22z-jue5-8udz"
                },
                {
                    "vulnerability": "VCID-heum-8mwz-sbcw"
                },
                {
                    "vulnerability": "VCID-j2uz-w2ur-7ud4"
                },
                {
                    "vulnerability": "VCID-jt9m-kd3k-uqca"
                },
                {
                    "vulnerability": "VCID-q4cv-2m7d-3qd5"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203796?format=api",
            "purl": "pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-32d1-b8f2-hud5"
                },
                {
                    "vulnerability": "VCID-3ccr-92q5-aqfk"
                },
                {
                    "vulnerability": "VCID-63c7-mkxw-ufav"
                },
                {
                    "vulnerability": "VCID-92z2-3rbz-77h9"
                },
                {
                    "vulnerability": "VCID-cg44-thdw-cygg"
                },
                {
                    "vulnerability": "VCID-dac4-fa2z-bkdq"
                },
                {
                    "vulnerability": "VCID-g22z-jue5-8udz"
                },
                {
                    "vulnerability": "VCID-heum-8mwz-sbcw"
                },
                {
                    "vulnerability": "VCID-j2uz-w2ur-7ud4"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203794?format=api",
            "purl": "pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-3ccr-92q5-aqfk"
                },
                {
                    "vulnerability": "VCID-92z2-3rbz-77h9"
                },
                {
                    "vulnerability": "VCID-g22z-jue5-8udz"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/203795?format=api",
            "purl": "pkg:deb/debian/python-django@3:5.2.14-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7734?format=api",
            "purl": "pkg:pypi/django@1.8.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-5sxw-p38k-q7cp"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6fef-e9tf-7kag"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-azdn-r9pz-pqd4"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-yb2r-r8gy-3yhe"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7569?format=api",
            "purl": "pkg:pypi/django@1.8a1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-23af-7vv6-uqf7"
                },
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-cps4-86gt-kyet"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-gky3-h8cp-mue9"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8a1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7570?format=api",
            "purl": "pkg:pypi/django@1.8b1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-23af-7vv6-uqf7"
                },
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-cps4-86gt-kyet"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-gky3-h8cp-mue9"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7572?format=api",
            "purl": "pkg:pypi/django@1.8b2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-cps4-86gt-kyet"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-gky3-h8cp-mue9"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8b2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/92765?format=api",
            "purl": "pkg:pypi/django@1.8c1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8c1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7732?format=api",
            "purl": "pkg:pypi/django@1.8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-5sxw-p38k-q7cp"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6fef-e9tf-7kag"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-azdn-r9pz-pqd4"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-yb2r-r8gy-3yhe"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/7733?format=api",
            "purl": "pkg:pypi/django@1.8.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-27qc-gba4-aqfd"
                },
                {
                    "vulnerability": "VCID-2bh9-k4at-r7hz"
                },
                {
                    "vulnerability": "VCID-5sxw-p38k-q7cp"
                },
                {
                    "vulnerability": "VCID-697r-xhy8-efa5"
                },
                {
                    "vulnerability": "VCID-6fef-e9tf-7kag"
                },
                {
                    "vulnerability": "VCID-6p2m-vyft-xfe8"
                },
                {
                    "vulnerability": "VCID-8nkf-1k3u-budg"
                },
                {
                    "vulnerability": "VCID-9udu-eqvn-mqbj"
                },
                {
                    "vulnerability": "VCID-arff-yjfe-auhp"
                },
                {
                    "vulnerability": "VCID-ax42-esfz-vud2"
                },
                {
                    "vulnerability": "VCID-ax7m-uv4s-zkc1"
                },
                {
                    "vulnerability": "VCID-azdn-r9pz-pqd4"
                },
                {
                    "vulnerability": "VCID-cbg1-8tp8-7ube"
                },
                {
                    "vulnerability": "VCID-fbee-vj2y-cfeb"
                },
                {
                    "vulnerability": "VCID-fkch-835a-4ffd"
                },
                {
                    "vulnerability": "VCID-fynq-usj6-rfd3"
                },
                {
                    "vulnerability": "VCID-hs1y-thzf-qqct"
                },
                {
                    "vulnerability": "VCID-hzcv-euwq-eqeg"
                },
                {
                    "vulnerability": "VCID-j1jc-m7e2-5yck"
                },
                {
                    "vulnerability": "VCID-nh19-fbce-wbfu"
                },
                {
                    "vulnerability": "VCID-ptk1-k7b2-gkdm"
                },
                {
                    "vulnerability": "VCID-qg2s-fuw3-nbda"
                },
                {
                    "vulnerability": "VCID-s4vz-wfcp-aygd"
                },
                {
                    "vulnerability": "VCID-u15a-4ste-43cy"
                },
                {
                    "vulnerability": "VCID-x33t-tqwv-vygf"
                },
                {
                    "vulnerability": "VCID-yb2r-r8gy-3yhe"
                },
                {
                    "vulnerability": "VCID-zuca-q98m-w7bk"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/django@1.8.1"
        }
    ],
    "references": [
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3982.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-3982.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3982",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00225",
                    "scoring_system": "epss",
                    "scoring_elements": "0.45263",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-3982"
        },
        {
            "reference_url": "https://github.com/django/django",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/django/django"
        },
        {
            "reference_url": "https://github.com/django/django/commit/31cb25adecba930bdeee4556709f5a1c42d88fd6",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/django/django/commit/31cb25adecba930bdeee4556709f5a1c42d88fd6"
        },
        {
            "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-19.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2015-19.yaml"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3982",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-3982"
        },
        {
            "reference_url": "https://web.archive.org/web/20200228092138/http://www.securityfocus.com/bid/74960",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://web.archive.org/web/20200228092138/http://www.securityfocus.com/bid/74960"
        },
        {
            "reference_url": "https://www.djangoproject.com/weblog/2015/may/20/security-release",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "7.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
                },
                {
                    "value": "6.6",
                    "scoring_system": "cvssv4",
                    "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U"
                },
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.djangoproject.com/weblog/2015/may/20/security-release"
        },
        {
            "reference_url": "https://www.djangoproject.com/weblog/2015/may/20/security-release/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.djangoproject.com/weblog/2015/may/20/security-release/"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/74960",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/74960"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221526",
            "reference_id": "1221526",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1221526"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-6wgp-fwfm-mxp3",
            "reference_id": "GHSA-6wgp-fwfm-mxp3",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/advisories/GHSA-6wgp-fwfm-mxp3"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 384,
            "name": "Session Fixation",
            "description": "Authenticating a user, or otherwise establishing a new user session, without invalidating any existing session identifier gives an attacker the opportunity to steal authenticated sessions."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 613,
            "name": "Insufficient Session Expiration",
            "description": "According to WASC, Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
        }
    ],
    "exploits": [],
    "severity_range_score": "4.0 - 7.5",
    "exploitability": "0.5",
    "weighted_severity": "0.0",
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-x33t-tqwv-vygf"
}