Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/ssddanbrown/bookstack@22.2.3
Typecomposer
Namespacessddanbrown
Namebookstack
Version22.2.3
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-14eh-31ua-sfe6
vulnerability_id VCID-14eh-31ua-sfe6
summary 
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site Scripting (XSS) - Stored in GitHub repository bookstackapp/bookstack prior to v22.02.3.
references
0
reference_url https://github.com/bookstackapp/bookstack/commit/856fca8289b7370cafa033ea21c408e7d4303fd6
reference_id
reference_type
scores
url https://github.com/bookstackapp/bookstack/commit/856fca8289b7370cafa033ea21c408e7d4303fd6
1
reference_url https://huntr.dev/bounties/b04df4e3-ae5a-4dc6-81ec-496248b15f3c
reference_id
reference_type
scores
url https://huntr.dev/bounties/b04df4e3-ae5a-4dc6-81ec-496248b15f3c
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0877
reference_id CVE-2022-0877
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-0877
3
reference_url https://github.com/advisories/GHSA-5rcc-6cmj-7728
reference_id GHSA-5rcc-6cmj-7728
reference_type
scores
url https://github.com/advisories/GHSA-5rcc-6cmj-7728
fixed_packages
0
url pkg:composer/ssddanbrown/bookstack@22.2.3
purl pkg:composer/ssddanbrown/bookstack@22.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/ssddanbrown/bookstack@22.2.3
aliases CVE-2022-0877, GHSA-5rcc-6cmj-7728
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-14eh-31ua-sfe6
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/ssddanbrown/bookstack@22.2.3