Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-e67s-whs3-bydn
Summarysecurity update
Aliases
0
alias CVE-2018-14912
Fixed_packages
0
url pkg:alpm/archlinux/cgit@1.2.1-1
purl pkg:alpm/archlinux/cgit@1.2.1-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/cgit@1.2.1-1
1
url pkg:apk/alpine/cgit@1.0-r2?arch=armhf&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/cgit@1.0-r2?arch=armhf&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.0-r2%3Farch=armhf&distroversion=v3.5&reponame=main
2
url pkg:apk/alpine/cgit@1.0-r2?arch=x86&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/cgit@1.0-r2?arch=x86&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.0-r2%3Farch=x86&distroversion=v3.5&reponame=main
3
url pkg:apk/alpine/cgit@1.0-r2?arch=x86_64&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/cgit@1.0-r2?arch=x86_64&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.0-r2%3Farch=x86_64&distroversion=v3.5&reponame=main
4
url pkg:apk/alpine/cgit@1.0-r2?arch=aarch64&distroversion=v3.5&reponame=main
purl pkg:apk/alpine/cgit@1.0-r2?arch=aarch64&distroversion=v3.5&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.0-r2%3Farch=aarch64&distroversion=v3.5&reponame=main
5
url pkg:apk/alpine/cgit@1.1-r2?arch=armhf&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=armhf&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=armhf&distroversion=v3.6&reponame=main
6
url pkg:apk/alpine/cgit@1.1-r2?arch=ppc64le&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=ppc64le&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=ppc64le&distroversion=v3.6&reponame=main
7
url pkg:apk/alpine/cgit@1.1-r2?arch=x86&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=x86&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=x86&distroversion=v3.6&reponame=main
8
url pkg:apk/alpine/cgit@1.1-r2?arch=s390x&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=s390x&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=s390x&distroversion=v3.6&reponame=main
9
url pkg:apk/alpine/cgit@1.1-r2?arch=aarch64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=aarch64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=aarch64&distroversion=v3.6&reponame=main
10
url pkg:apk/alpine/cgit@1.1-r2?arch=x86_64&distroversion=v3.6&reponame=main
purl pkg:apk/alpine/cgit@1.1-r2?arch=x86_64&distroversion=v3.6&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r2%3Farch=x86_64&distroversion=v3.6&reponame=main
11
url pkg:apk/alpine/cgit@1.1-r3?arch=aarch64&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=aarch64&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=aarch64&distroversion=v3.7&reponame=main
12
url pkg:apk/alpine/cgit@1.1-r3?arch=ppc64le&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=ppc64le&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=ppc64le&distroversion=v3.7&reponame=main
13
url pkg:apk/alpine/cgit@1.1-r3?arch=armhf&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=armhf&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=armhf&distroversion=v3.7&reponame=main
14
url pkg:apk/alpine/cgit@1.1-r3?arch=s390x&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=s390x&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=s390x&distroversion=v3.7&reponame=main
15
url pkg:apk/alpine/cgit@1.1-r3?arch=x86&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=x86&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=x86&distroversion=v3.7&reponame=main
16
url pkg:apk/alpine/cgit@1.1-r3?arch=x86_64&distroversion=v3.7&reponame=main
purl pkg:apk/alpine/cgit@1.1-r3?arch=x86_64&distroversion=v3.7&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r3%3Farch=x86_64&distroversion=v3.7&reponame=main
17
url pkg:apk/alpine/cgit@1.1-r4?arch=s390x&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=s390x&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=s390x&distroversion=v3.8&reponame=main
18
url pkg:apk/alpine/cgit@1.1-r4?arch=x86&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=x86&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=x86&distroversion=v3.8&reponame=main
19
url pkg:apk/alpine/cgit@1.1-r4?arch=x86_64&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=x86_64&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=x86_64&distroversion=v3.8&reponame=main
20
url pkg:apk/alpine/cgit@1.1-r4?arch=aarch64&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=aarch64&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=aarch64&distroversion=v3.8&reponame=main
21
url pkg:apk/alpine/cgit@1.1-r4?arch=armhf&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=armhf&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=armhf&distroversion=v3.8&reponame=main
22
url pkg:apk/alpine/cgit@1.1-r4?arch=ppc64le&distroversion=v3.8&reponame=main
purl pkg:apk/alpine/cgit@1.1-r4?arch=ppc64le&distroversion=v3.8&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/cgit@1.1-r4%3Farch=ppc64le&distroversion=v3.8&reponame=main
23
url pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3%2Bdeb9u1
purl pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e67s-whs3-bydn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.1%252Bgit2.10.2-3%252Bdeb9u1
24
url pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3.1?distro=trixie
purl pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3.1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.1%252Bgit2.10.2-3.1%3Fdistro=trixie
25
url pkg:deb/debian/cgit@1.2.1%2Bgit2.18.0-1
purl pkg:deb/debian/cgit@1.2.1%2Bgit2.18.0-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.1%252Bgit2.18.0-1
26
url pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit2.25.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit2.25.1-1%3Fdistro=trixie
27
url pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20221219.50.91f2590%2Bgit2.39.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20221219.50.91f2590%252Bgit2.39.1-1%3Fdistro=trixie
28
url pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20240802.70.09d24d7%2Bgit2.46.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20240802.70.09d24d7%252Bgit2.46.0-1%3Fdistro=trixie
29
url pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
purl pkg:deb/debian/cgit@1.2.3%2Bgit20250818.80.3346409%2Bgit2.51.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.2.3%252Bgit20250818.80.3346409%252Bgit2.51.0-1%3Fdistro=trixie
Affected_packages
0
url pkg:alpm/archlinux/cgit@1.2-1
purl pkg:alpm/archlinux/cgit@1.2-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e67s-whs3-bydn
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/cgit@1.2-1
1
url pkg:deb/debian/cgit@0.10.2.git2.0.1-3
purl pkg:deb/debian/cgit@0.10.2.git2.0.1-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4h46-k3sd-3uh8
1
vulnerability VCID-brus-h5y6-dffb
2
vulnerability VCID-e67s-whs3-bydn
3
vulnerability VCID-qh4p-ng26-s7cw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0.10.2.git2.0.1-3
2
url pkg:deb/debian/cgit@0.10.2.git2.0.1-3%2Bdeb8u1
purl pkg:deb/debian/cgit@0.10.2.git2.0.1-3%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4h46-k3sd-3uh8
1
vulnerability VCID-brus-h5y6-dffb
2
vulnerability VCID-e67s-whs3-bydn
3
vulnerability VCID-qh4p-ng26-s7cw
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@0.10.2.git2.0.1-3%252Bdeb8u1
3
url pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3~bpo8%2B1
purl pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e67s-whs3-bydn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.1%252Bgit2.10.2-3~bpo8%252B1
4
url pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3%2Bdeb9u1
purl pkg:deb/debian/cgit@1.1%2Bgit2.10.2-3%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e67s-whs3-bydn
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/cgit@1.1%252Bgit2.10.2-3%252Bdeb9u1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14912
reference_id
reference_type
scores
0
value 0.91474
scoring_system epss
scoring_elements 0.99671
published_at 2026-04-18T12:55:00Z
1
value 0.91474
scoring_system epss
scoring_elements 0.99663
published_at 2026-04-02T12:55:00Z
2
value 0.91474
scoring_system epss
scoring_elements 0.99665
published_at 2026-04-04T12:55:00Z
3
value 0.91474
scoring_system epss
scoring_elements 0.99666
published_at 2026-04-07T12:55:00Z
4
value 0.91474
scoring_system epss
scoring_elements 0.99667
published_at 2026-04-11T12:55:00Z
5
value 0.91474
scoring_system epss
scoring_elements 0.99668
published_at 2026-04-13T12:55:00Z
6
value 0.91474
scoring_system epss
scoring_elements 0.99669
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14912
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14912
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14912
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905382
reference_id 905382
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905382
3
reference_url https://security.archlinux.org/ASA-201808-2
reference_id ASA-201808-2
reference_type
scores
url https://security.archlinux.org/ASA-201808-2
4
reference_url https://security.archlinux.org/AVG-745
reference_id AVG-745
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-745
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/45195.rb
reference_id CVE-2018-14912
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/webapps/45195.rb
Weaknesses
Exploits
0
date_added 2018-08-14
description cgit 1.2.1 - Directory Traversal (Metasploit)
required_action null
due_date null
notes null
known_ransomware_campaign_use false
source_date_published 2018-08-14
exploit_type webapps
platform linux
source_date_updated 2018-08-14
data_source Exploit-DB
source_url
1
date_added null
description 
This module exploits a directory traversal vulnerability which
          exists in cgit < 1.2.1 cgit_clone_objects(), reachable when the
          configuration flag enable-http-clone is set to 1 (default).
required_action null
due_date null
notes 
Reliability:
  - unknown-reliability
Stability:
  - unknown-stability
SideEffects:
  - unknown-side-effects
known_ransomware_campaign_use false
source_date_published 2018-08-03
exploit_type null
platform
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/http/cgit_traversal.rb
Severity_range_score7.0 - 8.9
Exploitability2.0
Weighted_severity8.0
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-e67s-whs3-bydn