Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-4pf5-6u2a-37gu
Summarysource-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go
Aliases
0
alias CVE-2018-1102
Fixed_packages
Affected_packages
0
url pkg:rpm/redhat/apb@1.0.6-1?arch=el7
purl pkg:rpm/redhat/apb@1.0.6-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/apb@1.0.6-1%3Farch=el7
1
url pkg:rpm/redhat/atomic-openshift@3.1.1.11-4.git.3.12809c8?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.1.1.11-4.git.3.12809c8?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.1.1.11-4.git.3.12809c8%3Farch=el7
2
url pkg:rpm/redhat/atomic-openshift@3.2.1.34-2.git.3.aad33c3?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.2.1.34-2.git.3.aad33c3?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.2.1.34-2.git.3.aad33c3%3Farch=el7
3
url pkg:rpm/redhat/atomic-openshift@3.3.1.46.39-2.git.3.cc57f5b?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.3.1.46.39-2.git.3.cc57f5b?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.3.1.46.39-2.git.3.cc57f5b%3Farch=el7
4
url pkg:rpm/redhat/atomic-openshift@3.4.1.44.53-1.git.0.d7eb028?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.4.1.44.53-1.git.0.d7eb028?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.4.1.44.53-1.git.0.d7eb028%3Farch=el7
5
url pkg:rpm/redhat/atomic-openshift@3.5.5.31.67-1.git.0.0a8cf24?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.5.5.31.67-1.git.0.0a8cf24?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.5.5.31.67-1.git.0.0a8cf24%3Farch=el7
6
url pkg:rpm/redhat/atomic-openshift@3.6.173.0.113-1.git.0.65fb9fb?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.6.173.0.113-1.git.0.65fb9fb?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.6.173.0.113-1.git.0.65fb9fb%3Farch=el7
7
url pkg:rpm/redhat/atomic-openshift@3.7.44-1.git.0.6b061d4?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.7.44-1.git.0.6b061d4?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.7.44-1.git.0.6b061d4%3Farch=el7
8
url pkg:rpm/redhat/atomic-openshift@3.8.37-1.git.0.e85a326?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.8.37-1.git.0.e85a326?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.8.37-1.git.0.e85a326%3Farch=el7
9
url pkg:rpm/redhat/atomic-openshift@3.9.25-1.git.0.6bc473e?arch=el7
purl pkg:rpm/redhat/atomic-openshift@3.9.25-1.git.0.6bc473e?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift@3.9.25-1.git.0.6bc473e%3Farch=el7
10
url pkg:rpm/redhat/atomic-openshift-dockerregistry@3.8.37-1.git.224.8e15ecf?arch=el7
purl pkg:rpm/redhat/atomic-openshift-dockerregistry@3.8.37-1.git.224.8e15ecf?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/atomic-openshift-dockerregistry@3.8.37-1.git.224.8e15ecf%3Farch=el7
11
url pkg:rpm/redhat/openshift-ansible@3.4.168-1.git.0.bb73aad?arch=el7
purl pkg:rpm/redhat/openshift-ansible@3.4.168-1.git.0.bb73aad?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.4.168-1.git.0.bb73aad%3Farch=el7
12
url pkg:rpm/redhat/openshift-ansible@3.5.165-1.git.0.475fa67?arch=el7
purl pkg:rpm/redhat/openshift-ansible@3.5.165-1.git.0.475fa67?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.5.165-1.git.0.475fa67%3Farch=el7
13
url pkg:rpm/redhat/openshift-ansible@3.8.37-1.git.0.be319af?arch=el7
purl pkg:rpm/redhat/openshift-ansible@3.8.37-1.git.0.be319af?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openshift-ansible@3.8.37-1.git.0.be319af%3Farch=el7
14
url pkg:rpm/redhat/python-ruamel-yaml@0.12.14-9?arch=el7
purl pkg:rpm/redhat/python-ruamel-yaml@0.12.14-9?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python-ruamel-yaml@0.12.14-9%3Farch=el7
15
url pkg:rpm/redhat/rubygem-cool.io@1.5.3-1?arch=el7
purl pkg:rpm/redhat/rubygem-cool.io@1.5.3-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-cool.io@1.5.3-1%3Farch=el7
16
url pkg:rpm/redhat/rubygem-excon@0.60.0-1?arch=el7
purl pkg:rpm/redhat/rubygem-excon@0.60.0-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-excon@0.60.0-1%3Farch=el7
17
url pkg:rpm/redhat/rubygem-faraday@0.13.1-1?arch=el7
purl pkg:rpm/redhat/rubygem-faraday@0.13.1-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-faraday@0.13.1-1%3Farch=el7
18
url pkg:rpm/redhat/rubygem-ffi@1.9.23-1?arch=el7
purl pkg:rpm/redhat/rubygem-ffi@1.9.23-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-ffi@1.9.23-1%3Farch=el7
19
url pkg:rpm/redhat/rubygem-fluent-plugin-elasticsearch@1.14.0-1?arch=el7
purl pkg:rpm/redhat/rubygem-fluent-plugin-elasticsearch@1.14.0-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-fluent-plugin-elasticsearch@1.14.0-1%3Farch=el7
20
url pkg:rpm/redhat/rubygem-fluent-plugin-kubernetes_metadata_filter@1.0.1-1?arch=el7
purl pkg:rpm/redhat/rubygem-fluent-plugin-kubernetes_metadata_filter@1.0.1-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-fluent-plugin-kubernetes_metadata_filter@1.0.1-1%3Farch=el7
21
url pkg:rpm/redhat/rubygem-fluent-plugin-systemd@0.0.9-1?arch=el7
purl pkg:rpm/redhat/rubygem-fluent-plugin-systemd@0.0.9-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-fluent-plugin-systemd@0.0.9-1%3Farch=el7
22
url pkg:rpm/redhat/rubygem-minitest@5.10.3-1?arch=el7
purl pkg:rpm/redhat/rubygem-minitest@5.10.3-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-minitest@5.10.3-1%3Farch=el7
23
url pkg:rpm/redhat/rubygem-msgpack@1.2.2-1?arch=el7
purl pkg:rpm/redhat/rubygem-msgpack@1.2.2-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-msgpack@1.2.2-1%3Farch=el7
24
url pkg:rpm/redhat/rubygem-multi_json@1.13.1-1?arch=el7
purl pkg:rpm/redhat/rubygem-multi_json@1.13.1-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-multi_json@1.13.1-1%3Farch=el7
25
url pkg:rpm/redhat/rubygem-systemd-journal@1.3.1-1?arch=el7
purl pkg:rpm/redhat/rubygem-systemd-journal@1.3.1-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-systemd-journal@1.3.1-1%3Farch=el7
26
url pkg:rpm/redhat/rubygem-tzinfo@1.2.5-1?arch=el7
purl pkg:rpm/redhat/rubygem-tzinfo@1.2.5-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-tzinfo@1.2.5-1%3Farch=el7
27
url pkg:rpm/redhat/rubygem-tzinfo-data@1.2018.3-1?arch=el7
purl pkg:rpm/redhat/rubygem-tzinfo-data@1.2018.3-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-tzinfo-data@1.2018.3-1%3Farch=el7
28
url pkg:rpm/redhat/rubygem-unf_ext@0.0.7.5-1?arch=el7
purl pkg:rpm/redhat/rubygem-unf_ext@0.0.7.5-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
1
vulnerability VCID-ep8y-hq9y-afcu
2
vulnerability VCID-u9ph-5sbd-mfgp
3
vulnerability VCID-vtvy-ec7a-xua9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rubygem-unf_ext@0.0.7.5-1%3Farch=el7
29
url pkg:rpm/redhat/source-to-image@1.1.13-1?arch=el7
purl pkg:rpm/redhat/source-to-image@1.1.13-1?arch=el7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4pf5-6u2a-37gu
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/source-to-image@1.1.13-1%3Farch=el7
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json
reference_id
reference_type
scores
0
value 9.9
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1102.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-1102
reference_id
reference_type
scores
0
value 0.01553
scoring_system epss
scoring_elements 0.8136
published_at 2026-04-01T12:55:00Z
1
value 0.01553
scoring_system epss
scoring_elements 0.81465
published_at 2026-04-21T12:55:00Z
2
value 0.01553
scoring_system epss
scoring_elements 0.81426
published_at 2026-04-13T12:55:00Z
3
value 0.01553
scoring_system epss
scoring_elements 0.81463
published_at 2026-04-18T12:55:00Z
4
value 0.01553
scoring_system epss
scoring_elements 0.81369
published_at 2026-04-02T12:55:00Z
5
value 0.01553
scoring_system epss
scoring_elements 0.81392
published_at 2026-04-04T12:55:00Z
6
value 0.01553
scoring_system epss
scoring_elements 0.8139
published_at 2026-04-07T12:55:00Z
7
value 0.01553
scoring_system epss
scoring_elements 0.81418
published_at 2026-04-08T12:55:00Z
8
value 0.01553
scoring_system epss
scoring_elements 0.81424
published_at 2026-04-09T12:55:00Z
9
value 0.01553
scoring_system epss
scoring_elements 0.81445
published_at 2026-04-11T12:55:00Z
10
value 0.01553
scoring_system epss
scoring_elements 0.81433
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-1102
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1562246
reference_id 1562246
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1562246
3
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.0:*:*:*:enterprise:*:*:*
4
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.1:*:*:*:enterprise:*:*:*
5
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.2:*:*:*:enterprise:*:*:*
6
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.3:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.3:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.3:*:*:*:enterprise:*:*:*
7
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.4:*:*:*:enterprise:*:*:*
8
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.5:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.5:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.5:*:*:*:enterprise:*:*:*
9
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.6:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.6:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.6:*:*:*:enterprise:*:*:*
10
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.7:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.7:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.7:*:*:*:enterprise:*:*:*
11
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.8:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.8:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.8:*:*:*:enterprise:*:*:*
12
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.9:*:*:*:enterprise:*:*:*
reference_id cpe:2.3:a:redhat:openshift:3.9:*:*:*:enterprise:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:redhat:openshift:3.9:*:*:*:enterprise:*:*:*
13
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-1102
reference_id CVE-2018-1102
reference_type
scores
0
value 6.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:S/C:P/I:P/A:P
1
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://nvd.nist.gov/vuln/detail/CVE-2018-1102
14
reference_url https://access.redhat.com/errata/RHSA-2018:1227
reference_id RHSA-2018:1227
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1227
15
reference_url https://access.redhat.com/errata/RHSA-2018:1229
reference_id RHSA-2018:1229
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1229
16
reference_url https://access.redhat.com/errata/RHSA-2018:1231
reference_id RHSA-2018:1231
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1231
17
reference_url https://access.redhat.com/errata/RHSA-2018:1233
reference_id RHSA-2018:1233
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1233
18
reference_url https://access.redhat.com/errata/RHSA-2018:1235
reference_id RHSA-2018:1235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1235
19
reference_url https://access.redhat.com/errata/RHSA-2018:1237
reference_id RHSA-2018:1237
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1237
20
reference_url https://access.redhat.com/errata/RHSA-2018:1239
reference_id RHSA-2018:1239
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1239
21
reference_url https://access.redhat.com/errata/RHSA-2018:1241
reference_id RHSA-2018:1241
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1241
22
reference_url https://access.redhat.com/errata/RHSA-2018:1243
reference_id RHSA-2018:1243
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:1243
23
reference_url https://access.redhat.com/errata/RHSA-2019:0036
reference_id RHSA-2019:0036
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0036
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
1
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Exploits
Severity_range_score6.5 - 9.9
Exploitability0.5
Weighted_severity8.9
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-4pf5-6u2a-37gu