Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-xbt7-ks9g-c7gd
SummaryIn Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Aliases
0
alias CVE-2017-17835
1
alias GHSA-68wv-rjrm-576p
2
alias PYSEC-2019-148
Fixed_packages
0
url pkg:pypi/apache-airflow@1.9.0
purl pkg:pypi/apache-airflow@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-pb3b-22wk-pbh5
46
vulnerability VCID-pmtw-nwnc-nyfw
47
vulnerability VCID-pqgj-ry81-6ua3
48
vulnerability VCID-qxnw-7urw-fud2
49
vulnerability VCID-rysu-xhvt-yqda
50
vulnerability VCID-s49h-br5r-5yh8
51
vulnerability VCID-ssbp-gvfd-2kef
52
vulnerability VCID-syqv-6kj7-j3e5
53
vulnerability VCID-tcjg-f9cn-mubj
54
vulnerability VCID-tpjn-4kru-vucv
55
vulnerability VCID-vj7z-pmk3-cydg
56
vulnerability VCID-vras-f42j-xqfg
57
vulnerability VCID-vy44-rbar-w3fn
58
vulnerability VCID-w8ff-8479-rbfq
59
vulnerability VCID-x8g4-88t4-cqdz
60
vulnerability VCID-xwza-guvs-83a9
61
vulnerability VCID-ygjc-77t9-yfge
62
vulnerability VCID-ykge-bnhg-g7c4
63
vulnerability VCID-yrx8-dtav-83av
64
vulnerability VCID-yz8w-uv1z-5ybw
65
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.9.0
Affected_packages
0
url pkg:pypi/apache-airflow@1.8.1
purl pkg:pypi/apache-airflow@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-rysu-xhvt-yqda
51
vulnerability VCID-s49h-br5r-5yh8
52
vulnerability VCID-ssbp-gvfd-2kef
53
vulnerability VCID-syqv-6kj7-j3e5
54
vulnerability VCID-sz6v-udpx-wbav
55
vulnerability VCID-tcjg-f9cn-mubj
56
vulnerability VCID-tpjn-4kru-vucv
57
vulnerability VCID-vj7z-pmk3-cydg
58
vulnerability VCID-vras-f42j-xqfg
59
vulnerability VCID-vy44-rbar-w3fn
60
vulnerability VCID-w8ff-8479-rbfq
61
vulnerability VCID-wm1m-yj2y-yfa3
62
vulnerability VCID-x8g4-88t4-cqdz
63
vulnerability VCID-xbt7-ks9g-c7gd
64
vulnerability VCID-xwza-guvs-83a9
65
vulnerability VCID-ygjc-77t9-yfge
66
vulnerability VCID-ykge-bnhg-g7c4
67
vulnerability VCID-yrx8-dtav-83av
68
vulnerability VCID-yz8w-uv1z-5ybw
69
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.1
1
url pkg:pypi/apache-airflow@1.8.2rc1
purl pkg:pypi/apache-airflow@1.8.2rc1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-rysu-xhvt-yqda
51
vulnerability VCID-s49h-br5r-5yh8
52
vulnerability VCID-ssbp-gvfd-2kef
53
vulnerability VCID-syqv-6kj7-j3e5
54
vulnerability VCID-sz6v-udpx-wbav
55
vulnerability VCID-tcjg-f9cn-mubj
56
vulnerability VCID-tpjn-4kru-vucv
57
vulnerability VCID-vj7z-pmk3-cydg
58
vulnerability VCID-vras-f42j-xqfg
59
vulnerability VCID-vy44-rbar-w3fn
60
vulnerability VCID-w8ff-8479-rbfq
61
vulnerability VCID-wm1m-yj2y-yfa3
62
vulnerability VCID-x8g4-88t4-cqdz
63
vulnerability VCID-xbt7-ks9g-c7gd
64
vulnerability VCID-xwza-guvs-83a9
65
vulnerability VCID-ygjc-77t9-yfge
66
vulnerability VCID-ykge-bnhg-g7c4
67
vulnerability VCID-yrx8-dtav-83av
68
vulnerability VCID-yz8w-uv1z-5ybw
69
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2rc1
2
url pkg:pypi/apache-airflow@1.8.2
purl pkg:pypi/apache-airflow@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1963-1kyn-2ban
1
vulnerability VCID-1azm-hsvr-f3e8
2
vulnerability VCID-1ptn-xvsy-d3hu
3
vulnerability VCID-2q7x-bua5-37h7
4
vulnerability VCID-2xpf-ut63-tbcx
5
vulnerability VCID-37nw-x186-puds
6
vulnerability VCID-4693-xwwu-7uem
7
vulnerability VCID-4btd-59ga-1yd4
8
vulnerability VCID-4u8d-ezsr-sqcz
9
vulnerability VCID-5j9w-1tng-k3ac
10
vulnerability VCID-5ph5-s3qc-guf4
11
vulnerability VCID-5qe8-jdbh-x7b4
12
vulnerability VCID-5ufe-1rrj-rkgp
13
vulnerability VCID-6hxm-nnhg-buex
14
vulnerability VCID-7z8j-8f4d-53dm
15
vulnerability VCID-82p8-yujf-hkdd
16
vulnerability VCID-8m3p-yzr8-yyhj
17
vulnerability VCID-8npr-rvfd-jkfj
18
vulnerability VCID-8ykk-1kak-6bfd
19
vulnerability VCID-91ta-vnkv-5ydh
20
vulnerability VCID-9f34-2r5y-sydz
21
vulnerability VCID-arbk-dryb-qkda
22
vulnerability VCID-bgp2-bzbr-1uh5
23
vulnerability VCID-bn9u-brjp-yudy
24
vulnerability VCID-bxw8-918z-1be5
25
vulnerability VCID-c1bw-f7ck-2ybw
26
vulnerability VCID-ctd9-hxfn-8fcs
27
vulnerability VCID-d3kc-fn21-xqar
28
vulnerability VCID-dk1y-938p-k3bv
29
vulnerability VCID-dp6s-jdma-a7cc
30
vulnerability VCID-e19b-adrm-x7fu
31
vulnerability VCID-fctg-457f-4uae
32
vulnerability VCID-fnsx-gtgn-27dr
33
vulnerability VCID-gbgf-jfzt-tqg1
34
vulnerability VCID-gg94-fdbv-y7g1
35
vulnerability VCID-gt7b-5554-y7dq
36
vulnerability VCID-hgq2-kuex-y3a3
37
vulnerability VCID-hpf3-3z3m-6ydt
38
vulnerability VCID-j6uh-kx6m-sydp
39
vulnerability VCID-kb4a-mm13-63bj
40
vulnerability VCID-kgfb-yphg-n3ec
41
vulnerability VCID-krjr-ctw4-r3d3
42
vulnerability VCID-ms13-tzaa-hkej
43
vulnerability VCID-nfbc-tutd-37bw
44
vulnerability VCID-p42d-ta7v-7yhn
45
vulnerability VCID-p9rb-ehta-2bhc
46
vulnerability VCID-pb3b-22wk-pbh5
47
vulnerability VCID-pmtw-nwnc-nyfw
48
vulnerability VCID-pqgj-ry81-6ua3
49
vulnerability VCID-qxnw-7urw-fud2
50
vulnerability VCID-rysu-xhvt-yqda
51
vulnerability VCID-s49h-br5r-5yh8
52
vulnerability VCID-ssbp-gvfd-2kef
53
vulnerability VCID-syqv-6kj7-j3e5
54
vulnerability VCID-sz6v-udpx-wbav
55
vulnerability VCID-tcjg-f9cn-mubj
56
vulnerability VCID-tpjn-4kru-vucv
57
vulnerability VCID-vj7z-pmk3-cydg
58
vulnerability VCID-vras-f42j-xqfg
59
vulnerability VCID-vy44-rbar-w3fn
60
vulnerability VCID-w8ff-8479-rbfq
61
vulnerability VCID-wm1m-yj2y-yfa3
62
vulnerability VCID-x8g4-88t4-cqdz
63
vulnerability VCID-xbt7-ks9g-c7gd
64
vulnerability VCID-xwza-guvs-83a9
65
vulnerability VCID-ygjc-77t9-yfge
66
vulnerability VCID-ykge-bnhg-g7c4
67
vulnerability VCID-yrx8-dtav-83av
68
vulnerability VCID-yz8w-uv1z-5ybw
69
vulnerability VCID-zqdb-94dc-vqfh
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/apache-airflow@1.8.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-17835
reference_id
reference_type
scores
0
value 0.00413
scoring_system epss
scoring_elements 0.61811
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-17835
1
reference_url https://github.com/advisories/GHSA-68wv-rjrm-576p
reference_id
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-68wv-rjrm-576p
2
reference_url https://github.com/apache/airflow
reference_id
reference_type
scores
url https://github.com/apache/airflow
3
reference_url https://github.com/apache/airflow/commit/673026c740411cc6447aede8c6a816460fe03a59
reference_id
reference_type
scores
url https://github.com/apache/airflow/commit/673026c740411cc6447aede8c6a816460fe03a59
4
reference_url https://github.com/apache/airflow/commit/6aca2c2d395952341ab1b201c59011920b5a5c77
reference_id
reference_type
scores
url https://github.com/apache/airflow/commit/6aca2c2d395952341ab1b201c59011920b5a5c77
5
reference_url https://github.com/apache/airflow/commit/c9dc9263986c1a55520ba44b6e5b0fcbd6c48712
reference_id
reference_type
scores
url https://github.com/apache/airflow/commit/c9dc9263986c1a55520ba44b6e5b0fcbd6c48712
6
reference_url https://github.com/apache/airflow/commit/dca5e7d116b5c8b103df13f89f061757c13c41ae
reference_id
reference_type
scores
url https://github.com/apache/airflow/commit/dca5e7d116b5c8b103df13f89f061757c13c41ae
7
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2019-148.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2019-148.yaml
8
reference_url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/ade4d54ebf614f68dc81a08891755e60ea58ba88e0209233eeea5f57@%3Cdev.airflow.apache.org%3E
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-17835
reference_id CVE-2017-17835
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-17835
Weaknesses
0
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-xbt7-ks9g-c7gd