Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-389t-bp5k-yqbw
Summary
Magento Open Source allows XML Injection
Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not require user interaction.
Aliases
0
alias CVE-2023-29289
1
alias GHSA-wh42-8r2w-873x
Fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
Affected_packages
0
url pkg:composer/magento/community-edition@2.4.4-p1
purl pkg:composer/magento/community-edition@2.4.4-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16x4-fjuv-hbc4
1
vulnerability VCID-1wxk-rhfp-qqgp
2
vulnerability VCID-1xvu-3fjk-t7ay
3
vulnerability VCID-1yr5-8e84-cyf5
4
vulnerability VCID-2gjv-y49y-4yh7
5
vulnerability VCID-389t-bp5k-yqbw
6
vulnerability VCID-3d83-1r55-uqfb
7
vulnerability VCID-3tpy-wktb-wqdj
8
vulnerability VCID-4rga-e18t-myh6
9
vulnerability VCID-5bn1-w5sa-ubft
10
vulnerability VCID-6gue-nxx5-u3h6
11
vulnerability VCID-8wm3-xqbd-zqf5
12
vulnerability VCID-94sc-9fyk-2uay
13
vulnerability VCID-9u6k-hbxd-8bds
14
vulnerability VCID-9v4c-gauv-wyh2
15
vulnerability VCID-a2mn-k8qn-j7c9
16
vulnerability VCID-b6wy-nzzg-k3em
17
vulnerability VCID-bm3p-s43s-uuce
18
vulnerability VCID-c7rf-4ky3-tyev
19
vulnerability VCID-ca94-mqq1-jyaz
20
vulnerability VCID-ctr3-kt63-hybf
21
vulnerability VCID-de3q-b1v4-bybu
22
vulnerability VCID-enwr-t7r8-xyge
23
vulnerability VCID-eu82-bgnu-rue2
24
vulnerability VCID-euam-6b48-suhg
25
vulnerability VCID-gkb3-ddu2-qyg6
26
vulnerability VCID-hcbc-9c78-yye6
27
vulnerability VCID-hwb9-yxzn-zub5
28
vulnerability VCID-jede-wz7z-2ugt
29
vulnerability VCID-jew7-2yd7-8ffp
30
vulnerability VCID-jg5k-6vqh-57ey
31
vulnerability VCID-kj9m-ccf8-gyep
32
vulnerability VCID-mgnu-rgqb-h7cw
33
vulnerability VCID-ntcr-n7fp-j3ab
34
vulnerability VCID-pqpk-dh2p-4yc8
35
vulnerability VCID-qxz4-rh86-cfcu
36
vulnerability VCID-rmqf-8w57-uydk
37
vulnerability VCID-u3gt-rhgh-p7ax
38
vulnerability VCID-ub5g-fuqv-xqej
39
vulnerability VCID-ueg1-1xj3-aqcq
40
vulnerability VCID-umy7-aq5d-vfhj
41
vulnerability VCID-vt4j-zfwn-m3cd
42
vulnerability VCID-whzv-vgev-rqd4
43
vulnerability VCID-wv9y-3kyz-hbgq
44
vulnerability VCID-xhej-jypg-7fah
45
vulnerability VCID-ypqs-5ju2-hkcz
46
vulnerability VCID-zndr-m4hp-gue2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p1
1
url pkg:composer/magento/community-edition@2.4.4
purl pkg:composer/magento/community-edition@2.4.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11ed-qtc7-bqbg
1
vulnerability VCID-16x4-fjuv-hbc4
2
vulnerability VCID-17xq-rhcp-z3hj
3
vulnerability VCID-1wxk-rhfp-qqgp
4
vulnerability VCID-1xvu-3fjk-t7ay
5
vulnerability VCID-1yj1-79jb-wyht
6
vulnerability VCID-1yr5-8e84-cyf5
7
vulnerability VCID-27w8-khpp-c7hk
8
vulnerability VCID-29fa-krur-qqbv
9
vulnerability VCID-2eq5-hm5y-f3f4
10
vulnerability VCID-2gjv-y49y-4yh7
11
vulnerability VCID-389t-bp5k-yqbw
12
vulnerability VCID-3d83-1r55-uqfb
13
vulnerability VCID-3hcd-r9gs-cfgh
14
vulnerability VCID-3sn5-689e-cbhk
15
vulnerability VCID-3tpy-wktb-wqdj
16
vulnerability VCID-3v4v-ysx5-77gs
17
vulnerability VCID-3vpy-uswf-5ugc
18
vulnerability VCID-3wnx-e9kp-fkg7
19
vulnerability VCID-46mz-swkk-suhn
20
vulnerability VCID-4kg3-wkw1-vqhy
21
vulnerability VCID-4rga-e18t-myh6
22
vulnerability VCID-4w8w-6563-3kfb
23
vulnerability VCID-5bn1-w5sa-ubft
24
vulnerability VCID-5du3-fvj3-87h7
25
vulnerability VCID-5fmh-e4j7-nbcf
26
vulnerability VCID-5tkb-ngcw-t7ap
27
vulnerability VCID-6g84-aswq-5kfb
28
vulnerability VCID-6gue-nxx5-u3h6
29
vulnerability VCID-6mxj-tzme-zyhb
30
vulnerability VCID-6srg-smmw-hycj
31
vulnerability VCID-7dbc-v42e-j7d6
32
vulnerability VCID-7dzy-1fxw-xfes
33
vulnerability VCID-86h6-jwyx-8yf2
34
vulnerability VCID-8crc-kmpq-63bd
35
vulnerability VCID-8kar-95vh-ube3
36
vulnerability VCID-8wm3-xqbd-zqf5
37
vulnerability VCID-94sc-9fyk-2uay
38
vulnerability VCID-96gx-zvab-yyhe
39
vulnerability VCID-9u6k-hbxd-8bds
40
vulnerability VCID-9v4c-gauv-wyh2
41
vulnerability VCID-a2mn-k8qn-j7c9
42
vulnerability VCID-b6wy-nzzg-k3em
43
vulnerability VCID-bm3p-s43s-uuce
44
vulnerability VCID-c7rf-4ky3-tyev
45
vulnerability VCID-ca94-mqq1-jyaz
46
vulnerability VCID-cd1x-g9b4-6ufh
47
vulnerability VCID-ctr3-kt63-hybf
48
vulnerability VCID-d6u8-dhmd-x3ed
49
vulnerability VCID-de3q-b1v4-bybu
50
vulnerability VCID-dqfx-d99q-jyd1
51
vulnerability VCID-ekn2-uahd-4qgw
52
vulnerability VCID-enwr-t7r8-xyge
53
vulnerability VCID-eu82-bgnu-rue2
54
vulnerability VCID-euam-6b48-suhg
55
vulnerability VCID-ewjp-uxup-gqex
56
vulnerability VCID-f5jj-23tj-wkbu
57
vulnerability VCID-f6vc-8z9a-cqej
58
vulnerability VCID-ft2p-3a61-wudj
59
vulnerability VCID-gdh1-vff1-cfc2
60
vulnerability VCID-gf2z-99wt-3qcg
61
vulnerability VCID-gkb3-ddu2-qyg6
62
vulnerability VCID-hcbc-9c78-yye6
63
vulnerability VCID-hwb9-yxzn-zub5
64
vulnerability VCID-jbs3-xb4d-j3gz
65
vulnerability VCID-jbzd-yjne-6ucr
66
vulnerability VCID-jede-wz7z-2ugt
67
vulnerability VCID-jehy-k235-4ua9
68
vulnerability VCID-jew7-2yd7-8ffp
69
vulnerability VCID-jg5k-6vqh-57ey
70
vulnerability VCID-jnsk-z1qy-8uh7
71
vulnerability VCID-k55s-dcep-mbbk
72
vulnerability VCID-khdx-kb5m-qyd7
73
vulnerability VCID-kj9m-ccf8-gyep
74
vulnerability VCID-kumb-xzbe-5fb3
75
vulnerability VCID-mcuv-294k-5qc4
76
vulnerability VCID-mgnu-rgqb-h7cw
77
vulnerability VCID-mgxx-zdm4-9fe7
78
vulnerability VCID-mwg1-4tbg-53cg
79
vulnerability VCID-ntcr-n7fp-j3ab
80
vulnerability VCID-p84d-d8gt-ukck
81
vulnerability VCID-pqpk-dh2p-4yc8
82
vulnerability VCID-qsq4-2nz1-p7hu
83
vulnerability VCID-qxz4-rh86-cfcu
84
vulnerability VCID-rgfy-hqz1-zyb4
85
vulnerability VCID-rhp2-bwp6-k3d4
86
vulnerability VCID-rmqf-8w57-uydk
87
vulnerability VCID-rv3b-5ja1-dkdv
88
vulnerability VCID-snxt-bv9t-nbdu
89
vulnerability VCID-t1ba-h3yd-yydc
90
vulnerability VCID-t2pj-rv3r-7fda
91
vulnerability VCID-t5m6-39fh-zfhg
92
vulnerability VCID-tn7z-sztq-hbax
93
vulnerability VCID-trys-a3eq-y7fb
94
vulnerability VCID-u3gt-rhgh-p7ax
95
vulnerability VCID-ub5g-fuqv-xqej
96
vulnerability VCID-ueg1-1xj3-aqcq
97
vulnerability VCID-umy7-aq5d-vfhj
98
vulnerability VCID-uv6e-ctrt-eycw
99
vulnerability VCID-v7r7-xtq1-gug6
100
vulnerability VCID-v7ru-7kga-2bet
101
vulnerability VCID-vt4j-zfwn-m3cd
102
vulnerability VCID-vthq-tuqs-5fg9
103
vulnerability VCID-vvzs-mjes-e3eq
104
vulnerability VCID-wdvt-5z3a-5bc2
105
vulnerability VCID-whzv-vgev-rqd4
106
vulnerability VCID-wv9y-3kyz-hbgq
107
vulnerability VCID-xde9-dz52-1fgp
108
vulnerability VCID-xhej-jypg-7fah
109
vulnerability VCID-xm9z-aqhf-uqft
110
vulnerability VCID-y9ew-ydqv-4kbf
111
vulnerability VCID-yh52-jggb-jfgx
112
vulnerability VCID-ypqs-5ju2-hkcz
113
vulnerability VCID-z5sv-b3wm-rqbe
114
vulnerability VCID-z7g7-sbje-bbev
115
vulnerability VCID-z8qf-cqwg-zkan
116
vulnerability VCID-zacs-wg6m-qyg4
117
vulnerability VCID-zjmz-qn1y-n3d9
118
vulnerability VCID-zndr-m4hp-gue2
119
vulnerability VCID-zwsv-4q8h-x3e7
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4
2
url pkg:composer/magento/community-edition@2.4.5-p1
purl pkg:composer/magento/community-edition@2.4.5-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11ed-qtc7-bqbg
1
vulnerability VCID-16x4-fjuv-hbc4
2
vulnerability VCID-17xq-rhcp-z3hj
3
vulnerability VCID-1wxk-rhfp-qqgp
4
vulnerability VCID-1xvu-3fjk-t7ay
5
vulnerability VCID-1yj1-79jb-wyht
6
vulnerability VCID-1yr5-8e84-cyf5
7
vulnerability VCID-27w8-khpp-c7hk
8
vulnerability VCID-29fa-krur-qqbv
9
vulnerability VCID-2eq5-hm5y-f3f4
10
vulnerability VCID-2gjv-y49y-4yh7
11
vulnerability VCID-389t-bp5k-yqbw
12
vulnerability VCID-3d83-1r55-uqfb
13
vulnerability VCID-3hcd-r9gs-cfgh
14
vulnerability VCID-3sn5-689e-cbhk
15
vulnerability VCID-3tpy-wktb-wqdj
16
vulnerability VCID-3v4v-ysx5-77gs
17
vulnerability VCID-3vpy-uswf-5ugc
18
vulnerability VCID-3wnx-e9kp-fkg7
19
vulnerability VCID-46mz-swkk-suhn
20
vulnerability VCID-4kg3-wkw1-vqhy
21
vulnerability VCID-4rga-e18t-myh6
22
vulnerability VCID-4w8w-6563-3kfb
23
vulnerability VCID-5bn1-w5sa-ubft
24
vulnerability VCID-5du3-fvj3-87h7
25
vulnerability VCID-5fmh-e4j7-nbcf
26
vulnerability VCID-5tkb-ngcw-t7ap
27
vulnerability VCID-6g84-aswq-5kfb
28
vulnerability VCID-6gue-nxx5-u3h6
29
vulnerability VCID-6mxj-tzme-zyhb
30
vulnerability VCID-6srg-smmw-hycj
31
vulnerability VCID-7dbc-v42e-j7d6
32
vulnerability VCID-7dzy-1fxw-xfes
33
vulnerability VCID-8crc-kmpq-63bd
34
vulnerability VCID-8wm3-xqbd-zqf5
35
vulnerability VCID-94sc-9fyk-2uay
36
vulnerability VCID-96gx-zvab-yyhe
37
vulnerability VCID-9rdk-3631-eqcw
38
vulnerability VCID-9u6k-hbxd-8bds
39
vulnerability VCID-9v4c-gauv-wyh2
40
vulnerability VCID-a2mn-k8qn-j7c9
41
vulnerability VCID-ac6e-denb-w7hy
42
vulnerability VCID-b6wy-nzzg-k3em
43
vulnerability VCID-bm3p-s43s-uuce
44
vulnerability VCID-c7rf-4ky3-tyev
45
vulnerability VCID-ca94-mqq1-jyaz
46
vulnerability VCID-ctr3-kt63-hybf
47
vulnerability VCID-d6u8-dhmd-x3ed
48
vulnerability VCID-de3q-b1v4-bybu
49
vulnerability VCID-dqfx-d99q-jyd1
50
vulnerability VCID-ekn2-uahd-4qgw
51
vulnerability VCID-enwr-t7r8-xyge
52
vulnerability VCID-epeq-fvse-xudw
53
vulnerability VCID-eu82-bgnu-rue2
54
vulnerability VCID-euam-6b48-suhg
55
vulnerability VCID-ewjp-uxup-gqex
56
vulnerability VCID-f5jj-23tj-wkbu
57
vulnerability VCID-f6vc-8z9a-cqej
58
vulnerability VCID-ft2p-3a61-wudj
59
vulnerability VCID-gdh1-vff1-cfc2
60
vulnerability VCID-gf2z-99wt-3qcg
61
vulnerability VCID-gkb3-ddu2-qyg6
62
vulnerability VCID-hcbc-9c78-yye6
63
vulnerability VCID-hwb9-yxzn-zub5
64
vulnerability VCID-jbs3-xb4d-j3gz
65
vulnerability VCID-jbzd-yjne-6ucr
66
vulnerability VCID-jede-wz7z-2ugt
67
vulnerability VCID-jehy-k235-4ua9
68
vulnerability VCID-jg5k-6vqh-57ey
69
vulnerability VCID-jnsk-z1qy-8uh7
70
vulnerability VCID-k55s-dcep-mbbk
71
vulnerability VCID-khdx-kb5m-qyd7
72
vulnerability VCID-kj9m-ccf8-gyep
73
vulnerability VCID-kumb-xzbe-5fb3
74
vulnerability VCID-mcuv-294k-5qc4
75
vulnerability VCID-mgxx-zdm4-9fe7
76
vulnerability VCID-mwg1-4tbg-53cg
77
vulnerability VCID-ntcr-n7fp-j3ab
78
vulnerability VCID-p84d-d8gt-ukck
79
vulnerability VCID-pqpk-dh2p-4yc8
80
vulnerability VCID-qsq4-2nz1-p7hu
81
vulnerability VCID-qxz4-rh86-cfcu
82
vulnerability VCID-rgfy-hqz1-zyb4
83
vulnerability VCID-rhp2-bwp6-k3d4
84
vulnerability VCID-rmqf-8w57-uydk
85
vulnerability VCID-rv3b-5ja1-dkdv
86
vulnerability VCID-t1ba-h3yd-yydc
87
vulnerability VCID-t5m6-39fh-zfhg
88
vulnerability VCID-tn7z-sztq-hbax
89
vulnerability VCID-u3gt-rhgh-p7ax
90
vulnerability VCID-ub5g-fuqv-xqej
91
vulnerability VCID-ueg1-1xj3-aqcq
92
vulnerability VCID-umy7-aq5d-vfhj
93
vulnerability VCID-uv6e-ctrt-eycw
94
vulnerability VCID-v7r7-xtq1-gug6
95
vulnerability VCID-v7ru-7kga-2bet
96
vulnerability VCID-vt4j-zfwn-m3cd
97
vulnerability VCID-vthq-tuqs-5fg9
98
vulnerability VCID-vvzs-mjes-e3eq
99
vulnerability VCID-wdvt-5z3a-5bc2
100
vulnerability VCID-whzv-vgev-rqd4
101
vulnerability VCID-wv9y-3kyz-hbgq
102
vulnerability VCID-xde9-dz52-1fgp
103
vulnerability VCID-xhej-jypg-7fah
104
vulnerability VCID-xm9z-aqhf-uqft
105
vulnerability VCID-y9ew-ydqv-4kbf
106
vulnerability VCID-yh52-jggb-jfgx
107
vulnerability VCID-ypqs-5ju2-hkcz
108
vulnerability VCID-z8qf-cqwg-zkan
109
vulnerability VCID-zacs-wg6m-qyg4
110
vulnerability VCID-zndr-m4hp-gue2
111
vulnerability VCID-zwsv-4q8h-x3e7
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p1
3
url pkg:composer/magento/community-edition@2.4.5
purl pkg:composer/magento/community-edition@2.4.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11ed-qtc7-bqbg
1
vulnerability VCID-16x4-fjuv-hbc4
2
vulnerability VCID-17xq-rhcp-z3hj
3
vulnerability VCID-1wxk-rhfp-qqgp
4
vulnerability VCID-1xvu-3fjk-t7ay
5
vulnerability VCID-1yj1-79jb-wyht
6
vulnerability VCID-1yr5-8e84-cyf5
7
vulnerability VCID-27w8-khpp-c7hk
8
vulnerability VCID-29fa-krur-qqbv
9
vulnerability VCID-2eq5-hm5y-f3f4
10
vulnerability VCID-2gjv-y49y-4yh7
11
vulnerability VCID-389t-bp5k-yqbw
12
vulnerability VCID-3d83-1r55-uqfb
13
vulnerability VCID-3hcd-r9gs-cfgh
14
vulnerability VCID-3jns-w9p4-jyca
15
vulnerability VCID-3sn5-689e-cbhk
16
vulnerability VCID-3tpy-wktb-wqdj
17
vulnerability VCID-3v4v-ysx5-77gs
18
vulnerability VCID-3vpy-uswf-5ugc
19
vulnerability VCID-3wnx-e9kp-fkg7
20
vulnerability VCID-46mz-swkk-suhn
21
vulnerability VCID-4kg3-wkw1-vqhy
22
vulnerability VCID-4rga-e18t-myh6
23
vulnerability VCID-4w8w-6563-3kfb
24
vulnerability VCID-53d5-qzm4-vfgs
25
vulnerability VCID-5bn1-w5sa-ubft
26
vulnerability VCID-5du3-fvj3-87h7
27
vulnerability VCID-5fmh-e4j7-nbcf
28
vulnerability VCID-5tkb-ngcw-t7ap
29
vulnerability VCID-6g84-aswq-5kfb
30
vulnerability VCID-6gue-nxx5-u3h6
31
vulnerability VCID-6mxj-tzme-zyhb
32
vulnerability VCID-6srg-smmw-hycj
33
vulnerability VCID-7dbc-v42e-j7d6
34
vulnerability VCID-7dzy-1fxw-xfes
35
vulnerability VCID-8crc-kmpq-63bd
36
vulnerability VCID-8wm3-xqbd-zqf5
37
vulnerability VCID-94sc-9fyk-2uay
38
vulnerability VCID-96gx-zvab-yyhe
39
vulnerability VCID-9u6k-hbxd-8bds
40
vulnerability VCID-9v4c-gauv-wyh2
41
vulnerability VCID-a2mn-k8qn-j7c9
42
vulnerability VCID-a9hc-nhv2-7ubx
43
vulnerability VCID-ac6e-denb-w7hy
44
vulnerability VCID-annu-j9a3-xkhs
45
vulnerability VCID-b6wy-nzzg-k3em
46
vulnerability VCID-bm3p-s43s-uuce
47
vulnerability VCID-c7rf-4ky3-tyev
48
vulnerability VCID-ca94-mqq1-jyaz
49
vulnerability VCID-ctr3-kt63-hybf
50
vulnerability VCID-d6u8-dhmd-x3ed
51
vulnerability VCID-de3q-b1v4-bybu
52
vulnerability VCID-dqfx-d99q-jyd1
53
vulnerability VCID-ekn2-uahd-4qgw
54
vulnerability VCID-enwr-t7r8-xyge
55
vulnerability VCID-eu82-bgnu-rue2
56
vulnerability VCID-euam-6b48-suhg
57
vulnerability VCID-ewjp-uxup-gqex
58
vulnerability VCID-f5jj-23tj-wkbu
59
vulnerability VCID-f6vc-8z9a-cqej
60
vulnerability VCID-ft2p-3a61-wudj
61
vulnerability VCID-gdh1-vff1-cfc2
62
vulnerability VCID-gf2z-99wt-3qcg
63
vulnerability VCID-gkb3-ddu2-qyg6
64
vulnerability VCID-gyd8-hu6s-wkgt
65
vulnerability VCID-hcbc-9c78-yye6
66
vulnerability VCID-hwb9-yxzn-zub5
67
vulnerability VCID-jbs3-xb4d-j3gz
68
vulnerability VCID-jbzd-yjne-6ucr
69
vulnerability VCID-jede-wz7z-2ugt
70
vulnerability VCID-jehy-k235-4ua9
71
vulnerability VCID-jew7-2yd7-8ffp
72
vulnerability VCID-jg5k-6vqh-57ey
73
vulnerability VCID-jnsk-z1qy-8uh7
74
vulnerability VCID-k55s-dcep-mbbk
75
vulnerability VCID-khdx-kb5m-qyd7
76
vulnerability VCID-kj9m-ccf8-gyep
77
vulnerability VCID-kumb-xzbe-5fb3
78
vulnerability VCID-mcuv-294k-5qc4
79
vulnerability VCID-mgk4-9tan-a7fj
80
vulnerability VCID-mgnu-rgqb-h7cw
81
vulnerability VCID-mgxx-zdm4-9fe7
82
vulnerability VCID-mwg1-4tbg-53cg
83
vulnerability VCID-ntcr-n7fp-j3ab
84
vulnerability VCID-p84d-d8gt-ukck
85
vulnerability VCID-pqpk-dh2p-4yc8
86
vulnerability VCID-qsq4-2nz1-p7hu
87
vulnerability VCID-qxz4-rh86-cfcu
88
vulnerability VCID-rgfy-hqz1-zyb4
89
vulnerability VCID-rhp2-bwp6-k3d4
90
vulnerability VCID-rmqf-8w57-uydk
91
vulnerability VCID-rv3b-5ja1-dkdv
92
vulnerability VCID-t1ba-h3yd-yydc
93
vulnerability VCID-t5m6-39fh-zfhg
94
vulnerability VCID-tn7z-sztq-hbax
95
vulnerability VCID-u3gt-rhgh-p7ax
96
vulnerability VCID-ub5g-fuqv-xqej
97
vulnerability VCID-ueg1-1xj3-aqcq
98
vulnerability VCID-umy7-aq5d-vfhj
99
vulnerability VCID-uv6e-ctrt-eycw
100
vulnerability VCID-v7r7-xtq1-gug6
101
vulnerability VCID-v7ru-7kga-2bet
102
vulnerability VCID-vjad-xkj2-nygh
103
vulnerability VCID-vt4j-zfwn-m3cd
104
vulnerability VCID-vthq-tuqs-5fg9
105
vulnerability VCID-vvzs-mjes-e3eq
106
vulnerability VCID-wdvt-5z3a-5bc2
107
vulnerability VCID-weqh-3ye3-nbbp
108
vulnerability VCID-whzv-vgev-rqd4
109
vulnerability VCID-wv9y-3kyz-hbgq
110
vulnerability VCID-xde9-dz52-1fgp
111
vulnerability VCID-xhej-jypg-7fah
112
vulnerability VCID-xm9z-aqhf-uqft
113
vulnerability VCID-y9ew-ydqv-4kbf
114
vulnerability VCID-yh52-jggb-jfgx
115
vulnerability VCID-yjgp-6ntk-xbc3
116
vulnerability VCID-ypqs-5ju2-hkcz
117
vulnerability VCID-yzdu-4cnk-5uft
118
vulnerability VCID-z8qf-cqwg-zkan
119
vulnerability VCID-zacs-wg6m-qyg4
120
vulnerability VCID-zgzb-haur-s7aq
121
vulnerability VCID-zndr-m4hp-gue2
122
vulnerability VCID-zwsv-4q8h-x3e7
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5
4
url pkg:composer/magento/community-edition@2.4.6
purl pkg:composer/magento/community-edition@2.4.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11ed-qtc7-bqbg
1
vulnerability VCID-16x4-fjuv-hbc4
2
vulnerability VCID-17xq-rhcp-z3hj
3
vulnerability VCID-1wxk-rhfp-qqgp
4
vulnerability VCID-1xvu-3fjk-t7ay
5
vulnerability VCID-1yj1-79jb-wyht
6
vulnerability VCID-1yr5-8e84-cyf5
7
vulnerability VCID-2495-ugn7-v7fk
8
vulnerability VCID-27w8-khpp-c7hk
9
vulnerability VCID-29fa-krur-qqbv
10
vulnerability VCID-2eq5-hm5y-f3f4
11
vulnerability VCID-389t-bp5k-yqbw
12
vulnerability VCID-3d83-1r55-uqfb
13
vulnerability VCID-3hcd-r9gs-cfgh
14
vulnerability VCID-3jns-w9p4-jyca
15
vulnerability VCID-3sn5-689e-cbhk
16
vulnerability VCID-3tpy-wktb-wqdj
17
vulnerability VCID-3v4v-ysx5-77gs
18
vulnerability VCID-3vpy-uswf-5ugc
19
vulnerability VCID-3wnx-e9kp-fkg7
20
vulnerability VCID-46mz-swkk-suhn
21
vulnerability VCID-4kg3-wkw1-vqhy
22
vulnerability VCID-4rga-e18t-myh6
23
vulnerability VCID-4w8w-6563-3kfb
24
vulnerability VCID-53d5-qzm4-vfgs
25
vulnerability VCID-5bn1-w5sa-ubft
26
vulnerability VCID-5du3-fvj3-87h7
27
vulnerability VCID-5fmh-e4j7-nbcf
28
vulnerability VCID-5tkb-ngcw-t7ap
29
vulnerability VCID-6g84-aswq-5kfb
30
vulnerability VCID-6gue-nxx5-u3h6
31
vulnerability VCID-6mxj-tzme-zyhb
32
vulnerability VCID-6srg-smmw-hycj
33
vulnerability VCID-7dbc-v42e-j7d6
34
vulnerability VCID-7dzy-1fxw-xfes
35
vulnerability VCID-8crc-kmpq-63bd
36
vulnerability VCID-8wm3-xqbd-zqf5
37
vulnerability VCID-94sc-9fyk-2uay
38
vulnerability VCID-96gx-zvab-yyhe
39
vulnerability VCID-9gte-ub5c-mqas
40
vulnerability VCID-9u6k-hbxd-8bds
41
vulnerability VCID-9v4c-gauv-wyh2
42
vulnerability VCID-a2mn-k8qn-j7c9
43
vulnerability VCID-a9hc-nhv2-7ubx
44
vulnerability VCID-ac6e-denb-w7hy
45
vulnerability VCID-annu-j9a3-xkhs
46
vulnerability VCID-b6wy-nzzg-k3em
47
vulnerability VCID-bm3p-s43s-uuce
48
vulnerability VCID-c7rf-4ky3-tyev
49
vulnerability VCID-ca94-mqq1-jyaz
50
vulnerability VCID-ctr3-kt63-hybf
51
vulnerability VCID-d372-f5hu-1bhr
52
vulnerability VCID-d6u8-dhmd-x3ed
53
vulnerability VCID-de3q-b1v4-bybu
54
vulnerability VCID-dqfx-d99q-jyd1
55
vulnerability VCID-ekn2-uahd-4qgw
56
vulnerability VCID-enwr-t7r8-xyge
57
vulnerability VCID-eu82-bgnu-rue2
58
vulnerability VCID-euam-6b48-suhg
59
vulnerability VCID-ewjp-uxup-gqex
60
vulnerability VCID-f5jj-23tj-wkbu
61
vulnerability VCID-f6vc-8z9a-cqej
62
vulnerability VCID-ft2p-3a61-wudj
63
vulnerability VCID-gdh1-vff1-cfc2
64
vulnerability VCID-gf2z-99wt-3qcg
65
vulnerability VCID-gkb3-ddu2-qyg6
66
vulnerability VCID-gyd8-hu6s-wkgt
67
vulnerability VCID-hbre-ty72-g7gy
68
vulnerability VCID-hcbc-9c78-yye6
69
vulnerability VCID-hwb9-yxzn-zub5
70
vulnerability VCID-jbs3-xb4d-j3gz
71
vulnerability VCID-jbzd-yjne-6ucr
72
vulnerability VCID-jede-wz7z-2ugt
73
vulnerability VCID-jehy-k235-4ua9
74
vulnerability VCID-jg5k-6vqh-57ey
75
vulnerability VCID-jnsk-z1qy-8uh7
76
vulnerability VCID-k55s-dcep-mbbk
77
vulnerability VCID-khdx-kb5m-qyd7
78
vulnerability VCID-kj9m-ccf8-gyep
79
vulnerability VCID-kumb-xzbe-5fb3
80
vulnerability VCID-mcuv-294k-5qc4
81
vulnerability VCID-mgk4-9tan-a7fj
82
vulnerability VCID-mgxx-zdm4-9fe7
83
vulnerability VCID-mwg1-4tbg-53cg
84
vulnerability VCID-ntcr-n7fp-j3ab
85
vulnerability VCID-p84d-d8gt-ukck
86
vulnerability VCID-pqpk-dh2p-4yc8
87
vulnerability VCID-qsq4-2nz1-p7hu
88
vulnerability VCID-qxz4-rh86-cfcu
89
vulnerability VCID-rgfy-hqz1-zyb4
90
vulnerability VCID-rhp2-bwp6-k3d4
91
vulnerability VCID-rmqf-8w57-uydk
92
vulnerability VCID-rv3b-5ja1-dkdv
93
vulnerability VCID-t1ba-h3yd-yydc
94
vulnerability VCID-t5m6-39fh-zfhg
95
vulnerability VCID-tk7j-4vsm-e7c6
96
vulnerability VCID-tn7z-sztq-hbax
97
vulnerability VCID-u3gt-rhgh-p7ax
98
vulnerability VCID-ub5g-fuqv-xqej
99
vulnerability VCID-ueg1-1xj3-aqcq
100
vulnerability VCID-uv6e-ctrt-eycw
101
vulnerability VCID-v7r7-xtq1-gug6
102
vulnerability VCID-v7ru-7kga-2bet
103
vulnerability VCID-vjad-xkj2-nygh
104
vulnerability VCID-vt4j-zfwn-m3cd
105
vulnerability VCID-vthq-tuqs-5fg9
106
vulnerability VCID-vvzs-mjes-e3eq
107
vulnerability VCID-wdvt-5z3a-5bc2
108
vulnerability VCID-weqh-3ye3-nbbp
109
vulnerability VCID-whzv-vgev-rqd4
110
vulnerability VCID-xde9-dz52-1fgp
111
vulnerability VCID-xhej-jypg-7fah
112
vulnerability VCID-xm9z-aqhf-uqft
113
vulnerability VCID-y9ew-ydqv-4kbf
114
vulnerability VCID-yh52-jggb-jfgx
115
vulnerability VCID-yjgp-6ntk-xbc3
116
vulnerability VCID-ypqs-5ju2-hkcz
117
vulnerability VCID-yzdu-4cnk-5uft
118
vulnerability VCID-z8qf-cqwg-zkan
119
vulnerability VCID-zacs-wg6m-qyg4
120
vulnerability VCID-zgzb-haur-s7aq
121
vulnerability VCID-zwsv-4q8h-x3e7
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6
5
url pkg:composer/magento/project-community-edition@2.0.2
purl pkg:composer/magento/project-community-edition@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16x4-fjuv-hbc4
1
vulnerability VCID-1qch-21pj-4yhs
2
vulnerability VCID-1wxk-rhfp-qqgp
3
vulnerability VCID-1xvu-3fjk-t7ay
4
vulnerability VCID-1yr5-8e84-cyf5
5
vulnerability VCID-2495-ugn7-v7fk
6
vulnerability VCID-2gjv-y49y-4yh7
7
vulnerability VCID-389t-bp5k-yqbw
8
vulnerability VCID-38rm-wf86-ryfw
9
vulnerability VCID-3d19-jvhv-kfej
10
vulnerability VCID-3d83-1r55-uqfb
11
vulnerability VCID-3hcd-r9gs-cfgh
12
vulnerability VCID-3jns-w9p4-jyca
13
vulnerability VCID-3mbp-mm4g-yybx
14
vulnerability VCID-3mg5-5bnt-3qb3
15
vulnerability VCID-3sn5-689e-cbhk
16
vulnerability VCID-3tpy-wktb-wqdj
17
vulnerability VCID-3vpy-uswf-5ugc
18
vulnerability VCID-3wnx-e9kp-fkg7
19
vulnerability VCID-46mz-swkk-suhn
20
vulnerability VCID-4kg3-wkw1-vqhy
21
vulnerability VCID-4phr-amm7-q3he
22
vulnerability VCID-4rga-e18t-myh6
23
vulnerability VCID-4w8w-6563-3kfb
24
vulnerability VCID-53d5-qzm4-vfgs
25
vulnerability VCID-5bn1-w5sa-ubft
26
vulnerability VCID-5fmh-e4j7-nbcf
27
vulnerability VCID-5m9k-7pab-bygj
28
vulnerability VCID-5wjs-5jc8-y7dv
29
vulnerability VCID-631j-28c3-zqam
30
vulnerability VCID-63pe-4w5f-zqax
31
vulnerability VCID-6cm3-pkzs-wbdu
32
vulnerability VCID-6gue-nxx5-u3h6
33
vulnerability VCID-7dbc-v42e-j7d6
34
vulnerability VCID-7jfc-dbkn-9fa4
35
vulnerability VCID-8crc-kmpq-63bd
36
vulnerability VCID-8vyv-da9b-x7c5
37
vulnerability VCID-8wm3-xqbd-zqf5
38
vulnerability VCID-94sc-9fyk-2uay
39
vulnerability VCID-9gte-ub5c-mqas
40
vulnerability VCID-9rdk-3631-eqcw
41
vulnerability VCID-9u6k-hbxd-8bds
42
vulnerability VCID-9v4c-gauv-wyh2
43
vulnerability VCID-a2mn-k8qn-j7c9
44
vulnerability VCID-a9hc-nhv2-7ubx
45
vulnerability VCID-ac6e-denb-w7hy
46
vulnerability VCID-annu-j9a3-xkhs
47
vulnerability VCID-atcy-z6qm-7qcn
48
vulnerability VCID-atnt-jfyb-uydk
49
vulnerability VCID-b6wy-nzzg-k3em
50
vulnerability VCID-bm3p-s43s-uuce
51
vulnerability VCID-c7rf-4ky3-tyev
52
vulnerability VCID-ca94-mqq1-jyaz
53
vulnerability VCID-ctr3-kt63-hybf
54
vulnerability VCID-d372-f5hu-1bhr
55
vulnerability VCID-dahp-ngf2-yfck
56
vulnerability VCID-ddnf-1ejm-g3fm
57
vulnerability VCID-de3q-b1v4-bybu
58
vulnerability VCID-dqfx-d99q-jyd1
59
vulnerability VCID-e514-8tra-9kg2
60
vulnerability VCID-ea9q-x4cf-wfdj
61
vulnerability VCID-eh85-akw2-4qby
62
vulnerability VCID-ekn2-uahd-4qgw
63
vulnerability VCID-enwr-t7r8-xyge
64
vulnerability VCID-epeq-fvse-xudw
65
vulnerability VCID-esvp-gu4v-hkc8
66
vulnerability VCID-eu82-bgnu-rue2
67
vulnerability VCID-euam-6b48-suhg
68
vulnerability VCID-ewjp-uxup-gqex
69
vulnerability VCID-f418-amxz-xfey
70
vulnerability VCID-f6vc-8z9a-cqej
71
vulnerability VCID-fk7u-x6n8-y3a8
72
vulnerability VCID-fs6u-kx4y-nqbh
73
vulnerability VCID-gdh1-vff1-cfc2
74
vulnerability VCID-gkb3-ddu2-qyg6
75
vulnerability VCID-gngq-4jm1-nffv
76
vulnerability VCID-gyd8-hu6s-wkgt
77
vulnerability VCID-hbre-ty72-g7gy
78
vulnerability VCID-hcbc-9c78-yye6
79
vulnerability VCID-hubk-cyxh-gbeu
80
vulnerability VCID-hwb9-yxzn-zub5
81
vulnerability VCID-jbzd-yjne-6ucr
82
vulnerability VCID-jede-wz7z-2ugt
83
vulnerability VCID-jew7-2yd7-8ffp
84
vulnerability VCID-jg5k-6vqh-57ey
85
vulnerability VCID-jgkp-2cew-c7hc
86
vulnerability VCID-jnsk-z1qy-8uh7
87
vulnerability VCID-khdx-kb5m-qyd7
88
vulnerability VCID-kj9m-ccf8-gyep
89
vulnerability VCID-ktbz-cqsm-cqdh
90
vulnerability VCID-mcuv-294k-5qc4
91
vulnerability VCID-mgk4-9tan-a7fj
92
vulnerability VCID-mgnu-rgqb-h7cw
93
vulnerability VCID-mn2q-e59e-9bhu
94
vulnerability VCID-mwg1-4tbg-53cg
95
vulnerability VCID-mxpb-g7qp-w3gp
96
vulnerability VCID-nf7q-381b-eufk
97
vulnerability VCID-ns3u-g7gm-kbfq
98
vulnerability VCID-ntcr-n7fp-j3ab
99
vulnerability VCID-p7gh-bgn5-kyfw
100
vulnerability VCID-p84d-d8gt-ukck
101
vulnerability VCID-pqpk-dh2p-4yc8
102
vulnerability VCID-pt49-zfad-2fgb
103
vulnerability VCID-qdse-avkx-7kb6
104
vulnerability VCID-qsq4-2nz1-p7hu
105
vulnerability VCID-qxz4-rh86-cfcu
106
vulnerability VCID-rgfy-hqz1-zyb4
107
vulnerability VCID-rhp2-bwp6-k3d4
108
vulnerability VCID-rmqf-8w57-uydk
109
vulnerability VCID-snxt-bv9t-nbdu
110
vulnerability VCID-t5m6-39fh-zfhg
111
vulnerability VCID-tk7j-4vsm-e7c6
112
vulnerability VCID-u3cx-xm7q-8uch
113
vulnerability VCID-u3gt-rhgh-p7ax
114
vulnerability VCID-u87h-sf89-k3ew
115
vulnerability VCID-u8ch-jew7-pubj
116
vulnerability VCID-ub5g-fuqv-xqej
117
vulnerability VCID-ueg1-1xj3-aqcq
118
vulnerability VCID-v7r7-xtq1-gug6
119
vulnerability VCID-vjad-xkj2-nygh
120
vulnerability VCID-vt4j-zfwn-m3cd
121
vulnerability VCID-vvzs-mjes-e3eq
122
vulnerability VCID-wbj6-ehhe-ybf1
123
vulnerability VCID-wdvt-5z3a-5bc2
124
vulnerability VCID-weqh-3ye3-nbbp
125
vulnerability VCID-whzv-vgev-rqd4
126
vulnerability VCID-wv9y-3kyz-hbgq
127
vulnerability VCID-x63j-5hm1-8kh9
128
vulnerability VCID-x9xn-qvau-kqhu
129
vulnerability VCID-xhej-jypg-7fah
130
vulnerability VCID-xum3-uvmz-efhj
131
vulnerability VCID-y9ew-ydqv-4kbf
132
vulnerability VCID-yh52-jggb-jfgx
133
vulnerability VCID-yhrq-kbj5-puaz
134
vulnerability VCID-yjgp-6ntk-xbc3
135
vulnerability VCID-yjrz-v74j-xbfx
136
vulnerability VCID-ypqs-5ju2-hkcz
137
vulnerability VCID-z5ak-93ax-gues
138
vulnerability VCID-zacs-wg6m-qyg4
139
vulnerability VCID-zgzb-haur-s7aq
140
vulnerability VCID-zndr-m4hp-gue2
141
vulnerability VCID-zpta-g6q9-ykdh
142
vulnerability VCID-zt1b-5ytz-wqb6
143
vulnerability VCID-zzn5-7yxb-t3hf
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/project-community-edition@2.0.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29289
reference_id
reference_type
scores
0
value 0.00357
scoring_system epss
scoring_elements 0.58242
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29289
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:23Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29289
reference_id CVE-2023-29289
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29289
4
reference_url https://github.com/advisories/GHSA-wh42-8r2w-873x
reference_id GHSA-wh42-8r2w-873x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wh42-8r2w-873x
Weaknesses
0
cwe_id 91
name XML Injection (aka Blind XPath Injection)
description The product does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-389t-bp5k-yqbw