Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sz6v-udpx-wbav
SummaryIn Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
Aliases
0
alias CVE-2017-15720
1
alias GHSA-8fg4-j562-mjrc
2
alias PYSEC-2019-147
Fixed_packages
0
url pkg:pypi/apache-airflow@1.9.0
purl pkg:pypi/apache-airflow@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-pb3b-22wk-pbh5
46
vulnerability VCID-pmtw-nwnc-nyfw
47
vulnerability VCID-pqgj-ry81-6ua3
48
vulnerability VCID-qxnw-7urw-fud2
49
vulnerability VCID-r6fk-1tfv-wkgq
50
vulnerability VCID-rysu-xhvt-yqda
51
vulnerability VCID-s49h-br5r-5yh8
52
vulnerability VCID-ssbp-gvfd-2kef
53
vulnerability VCID-syqv-6kj7-j3e5
54
vulnerability VCID-tcjg-f9cn-mubj
55
vulnerability VCID-tpjn-4kru-vucv
56
vulnerability VCID-vj7z-pmk3-cydg
57
vulnerability VCID-vras-f42j-xqfg
58
vulnerability VCID-vy44-rbar-w3fn
59
vulnerability VCID-w8ff-8479-rbfq
60
vulnerability VCID-x8g4-88t4-cqdz
61
vulnerability VCID-xwza-guvs-83a9
62
vulnerability VCID-ygjc-77t9-yfge
63
vulnerability VCID-ykge-bnhg-g7c4
64
vulnerability VCID-yrx8-dtav-83av
65
vulnerability VCID-yz8w-uv1z-5ybw
66
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.9.0
Affected_packages
0
url pkg:pypi/apache-airflow@1.8.1
purl pkg:pypi/apache-airflow@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-r6fk-1tfv-wkgq
51
vulnerability VCID-rysu-xhvt-yqda
52
vulnerability VCID-s49h-br5r-5yh8
53
vulnerability VCID-ssbp-gvfd-2kef
54
vulnerability VCID-syqv-6kj7-j3e5
55
vulnerability VCID-sz6v-udpx-wbav
56
vulnerability VCID-tcjg-f9cn-mubj
57
vulnerability VCID-tpjn-4kru-vucv
58
vulnerability VCID-vj7z-pmk3-cydg
59
vulnerability VCID-vras-f42j-xqfg
60
vulnerability VCID-vy44-rbar-w3fn
61
vulnerability VCID-w8ff-8479-rbfq
62
vulnerability VCID-wm1m-yj2y-yfa3
63
vulnerability VCID-x8g4-88t4-cqdz
64
vulnerability VCID-xbt7-ks9g-c7gd
65
vulnerability VCID-xwza-guvs-83a9
66
vulnerability VCID-ygjc-77t9-yfge
67
vulnerability VCID-ykge-bnhg-g7c4
68
vulnerability VCID-yrx8-dtav-83av
69
vulnerability VCID-yz8w-uv1z-5ybw
70
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.1
1
url pkg:pypi/apache-airflow@1.8.2rc1
purl pkg:pypi/apache-airflow@1.8.2rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-r6fk-1tfv-wkgq
51
vulnerability VCID-rysu-xhvt-yqda
52
vulnerability VCID-s49h-br5r-5yh8
53
vulnerability VCID-ssbp-gvfd-2kef
54
vulnerability VCID-syqv-6kj7-j3e5
55
vulnerability VCID-sz6v-udpx-wbav
56
vulnerability VCID-tcjg-f9cn-mubj
57
vulnerability VCID-tpjn-4kru-vucv
58
vulnerability VCID-vj7z-pmk3-cydg
59
vulnerability VCID-vras-f42j-xqfg
60
vulnerability VCID-vy44-rbar-w3fn
61
vulnerability VCID-w8ff-8479-rbfq
62
vulnerability VCID-wm1m-yj2y-yfa3
63
vulnerability VCID-x8g4-88t4-cqdz
64
vulnerability VCID-xbt7-ks9g-c7gd
65
vulnerability VCID-xwza-guvs-83a9
66
vulnerability VCID-ygjc-77t9-yfge
67
vulnerability VCID-ykge-bnhg-g7c4
68
vulnerability VCID-yrx8-dtav-83av
69
vulnerability VCID-yz8w-uv1z-5ybw
70
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2rc1
2
url pkg:pypi/apache-airflow@1.8.2
purl pkg:pypi/apache-airflow@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-r6fk-1tfv-wkgq
51
vulnerability VCID-rysu-xhvt-yqda
52
vulnerability VCID-s49h-br5r-5yh8
53
vulnerability VCID-ssbp-gvfd-2kef
54
vulnerability VCID-syqv-6kj7-j3e5
55
vulnerability VCID-sz6v-udpx-wbav
56
vulnerability VCID-tcjg-f9cn-mubj
57
vulnerability VCID-tpjn-4kru-vucv
58
vulnerability VCID-vj7z-pmk3-cydg
59
vulnerability VCID-vras-f42j-xqfg
60
vulnerability VCID-vy44-rbar-w3fn
61
vulnerability VCID-w8ff-8479-rbfq
62
vulnerability VCID-wm1m-yj2y-yfa3
63
vulnerability VCID-x8g4-88t4-cqdz
64
vulnerability VCID-xbt7-ks9g-c7gd
65
vulnerability VCID-xwza-guvs-83a9
66
vulnerability VCID-ygjc-77t9-yfge
67
vulnerability VCID-ykge-bnhg-g7c4
68
vulnerability VCID-yrx8-dtav-83av
69
vulnerability VCID-yz8w-uv1z-5ybw
70
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-15720
reference_id
reference_type
scores
0
value 0.00277
scoring_system epss
scoring_elements 0.51373
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-15720
1
reference_url https://github.com/advisories/GHSA-8fg4-j562-mjrc
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-8fg4-j562-mjrc
2
reference_url https://github.com/apache/airflow
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/airflow
3
reference_url https://github.com/apache/airflow/commit/04cacdd0a7526927137b452f38c3e894a5d2ce4a
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/airflow/commit/04cacdd0a7526927137b452f38c3e894a5d2ce4a
4
reference_url https://github.com/apache/airflow/commit/daa281c0364609d6812921123cf47e4118b40484
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/airflow/commit/daa281c0364609d6812921123cf47e4118b40484
5
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2019-147.yaml
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2019-147.yaml
6
reference_url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-15720
reference_id CVE-2017-15720
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-15720
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sz6v-udpx-wbav