Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/aleksis-core@2.3.2
Typepypi
Namespace
Namealeksis-core
Version2.3.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.9
Latest_non_vulnerable_version2.9
Affected_by_vulnerabilities
0
url VCID-feux-tjz3-2bea
vulnerability_id VCID-feux-tjz3-2bea
summary 
Access control issue in AlekSIS-Core
An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifically set.
references
0
reference_url https://aleksis.org/2022-05-04_advisory.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://aleksis.org/2022-05-04_advisory.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-29773
reference_id
reference_type
scores
0
value 0.00274
scoring_system epss
scoring_elements 0.50935
published_at 2026-05-29T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-29773
2
reference_url https://edugit.org/AlekSIS/official/AlekSIS-Core
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://edugit.org/AlekSIS/official/AlekSIS-Core
3
reference_url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/commit/0d39d5f566e1d916e3c8dedd3f5bd62161f30bd8
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/commit/0d39d5f566e1d916e3c8dedd3f5bd62161f30bd8
4
reference_url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/688
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/issues/688
5
reference_url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/merge_requests/1011
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://edugit.org/AlekSIS/official/AlekSIS-Core/-/merge_requests/1011
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-29773
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-29773
7
reference_url https://github.com/advisories/GHSA-76x2-h8h3-cwjg
reference_id GHSA-76x2-h8h3-cwjg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-76x2-h8h3-cwjg
fixed_packages
0
url pkg:pypi/aleksis-core@2.9
purl pkg:pypi/aleksis-core@2.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/aleksis-core@2.9
aliases CVE-2022-29773, GHSA-76x2-h8h3-cwjg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-feux-tjz3-2bea
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/aleksis-core@2.3.2