Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/symfony/security-csrf@3.2.0-alpha0
Typecomposer
Namespacesymfony
Namesecurity-csrf
Version3.2.0-alpha0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.2.14
Latest_non_vulnerable_version4.0.11
Affected_by_vulnerabilities
0
url VCID-dsbx-q641-4fc7
vulnerability_id VCID-dsbx-q641-4fc7
summary 
Cross-Site Request Forgery (CSRF)
The current implementation of CSRF protection in Symfony does not use different tokens for HTTP and HTTPS.
references
0
reference_url http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16653
reference_id
reference_type
scores
url http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16653
1
reference_url https://github.com/symfony/symfony/pull/24992
reference_id
reference_type
scores
url https://github.com/symfony/symfony/pull/24992
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-16653
reference_id CVE-2017-16653
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-16653
3
reference_url https://symfony.com/cve-2017-16653
reference_id CVE-2017-16653
reference_type
scores
url https://symfony.com/cve-2017-16653
fixed_packages
0
url pkg:composer/symfony/security-csrf@3.2.14
purl pkg:composer/symfony/security-csrf@3.2.14
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-csrf@3.2.14
1
url pkg:composer/symfony/security-csrf@3.3.13
purl pkg:composer/symfony/security-csrf@3.3.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-csrf@3.3.13
2
url pkg:composer/symfony/security-csrf@3.4.0-BETA5
purl pkg:composer/symfony/security-csrf@3.4.0-BETA5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-csrf@3.4.0-BETA5
3
url pkg:composer/symfony/security-csrf@4.0.0-BETA5
purl pkg:composer/symfony/security-csrf@4.0.0-BETA5
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-csrf@4.0.0-BETA5
aliases CVE-2017-16653
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsbx-q641-4fc7
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/symfony/security-csrf@3.2.0-alpha0