Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/blueimp/jquery-file-upload@9.15.0
Typecomposer
Namespaceblueimp
Namejquery-file-upload
Version9.15.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.22.1
Latest_non_vulnerable_version9.22.1
Affected_by_vulnerabilities
0
url VCID-856f-2ard-qudy
vulnerability_id VCID-856f-2ard-qudy
summary 
Unrestricted Upload of File with Dangerous Type
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-9206
reference_id
reference_type
scores
0
value 0.93778
scoring_system epss
scoring_elements 0.99863
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-9206
1
reference_url https://wpvulndb.com/vulnerabilities/9136
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://wpvulndb.com/vulnerabilities/9136
2
reference_url https://www.exploit-db.com/exploits/45790
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/45790
3
reference_url https://www.exploit-db.com/exploits/45790/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/45790/
4
reference_url https://www.exploit-db.com/exploits/46182
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/46182
5
reference_url https://www.exploit-db.com/exploits/46182/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46182/
6
reference_url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
7
reference_url http://www.securityfocus.com/bid/105679
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/105679
8
reference_url http://www.securityfocus.com/bid/106629
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/106629
9
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/45790.rb
reference_id CVE-2018-9206
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/45790.rb
10
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/45584.txt
reference_id CVE-2018-9206
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/45584.txt
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/46182.py
reference_id CVE-2018-9206
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/46182.py
12
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-9206
reference_id CVE-2018-9206
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2018-9206
13
reference_url https://raw.githubusercontent.com/rapid7/metasploit-framework/a32d8083f023c1445f411b74b8f85de5754cd3a0/modules/exploits/unix/webapp/jquery_file_upload.rb
reference_id CVE-2018-9206
reference_type exploit
scores
url https://raw.githubusercontent.com/rapid7/metasploit-framework/a32d8083f023c1445f411b74b8f85de5754cd3a0/modules/exploits/unix/webapp/jquery_file_upload.rb
14
reference_url http://www.vapidlabs.com/advisory.php?v=204
reference_id CVE-2018-9206
reference_type exploit
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url http://www.vapidlabs.com/advisory.php?v=204
15
reference_url https://github.com/advisories/GHSA-4cj8-g9cp-v5wr
reference_id GHSA-4cj8-g9cp-v5wr
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4cj8-g9cp-v5wr
fixed_packages
0
url pkg:composer/blueimp/jquery-file-upload@9.22.1
purl pkg:composer/blueimp/jquery-file-upload@9.22.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/blueimp/jquery-file-upload@9.22.1
aliases CVE-2018-9206, GHSA-4cj8-g9cp-v5wr
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-856f-2ard-qudy
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/blueimp/jquery-file-upload@9.15.0