Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/intelliants/subrion@4.1.5
Typecomposer
Namespaceintelliants
Namesubrion
Version4.1.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version4.2.0
Latest_non_vulnerable_version4.2.2
Affected_by_vulnerabilities
0
url VCID-cr7s-r2rz-8ybh
vulnerability_id VCID-cr7s-r2rz-8ybh
summary 
Cross-Site Request Forgery (CSRF)
There are CSRF vulnerabilities in Subrion CMS.
references
0
reference_url https://github.com/intelliants/subrion/issues/547
reference_id
reference_type
scores
url https://github.com/intelliants/subrion/issues/547
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-15063
reference_id CVE-2017-15063
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-15063
fixed_packages
0
url pkg:composer/intelliants/subrion@4.2.0
purl pkg:composer/intelliants/subrion@4.2.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.2.0
aliases CVE-2017-15063
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cr7s-r2rz-8ybh
1
url VCID-tuub-vc8w-1qbu
vulnerability_id VCID-tuub-vc8w-1qbu
summary 
Cross-Site Request Forgery (CSRF)
Subrion CMS 4.1.5 has CSRF in blog/delete/.
references
0
reference_url https://github.com/intelliants/subrion/issues/477
reference_id
reference_type
scores
url https://github.com/intelliants/subrion/issues/477
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-18366
reference_id CVE-2017-18366
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-18366
2
reference_url https://github.com/advisories/GHSA-c939-g732-48r8
reference_id GHSA-c939-g732-48r8
reference_type
scores
url https://github.com/advisories/GHSA-c939-g732-48r8
fixed_packages
aliases CVE-2017-18366, GHSA-c939-g732-48r8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tuub-vc8w-1qbu
Fixing_vulnerabilities
0
url VCID-ncdz-29ff-53fr
vulnerability_id VCID-ncdz-29ff-53fr
summary 
Cross-site Scripting
A Cross-site scripting allows remote attackers to inject arbitrary web script or HTML via the body to `blog/add/`.
references
0
reference_url https://github.com/intelliants/subrion/issues/467
reference_id
reference_type
scores
url https://github.com/intelliants/subrion/issues/467
1
reference_url http://www.securityfocus.com/bid/99378
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/99378
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-10795
reference_id CVE-2017-10795
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-10795
fixed_packages
0
url pkg:composer/intelliants/subrion@4.1.5
purl pkg:composer/intelliants/subrion@4.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cr7s-r2rz-8ybh
1
vulnerability VCID-tuub-vc8w-1qbu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.1.5
aliases CVE-2017-10795
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ncdz-29ff-53fr
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/intelliants/subrion@4.1.5