Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-r4e4-u4s6-63gc

Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

Aliases

alias	CVE-2023-35887

alias	GHSA-mjmq-gwgm-5qhm

Fixed_packages

url	pkg:deb/debian/libmina-sshd-java@0?distro=trixie
purl	pkg:deb/debian/libmina-sshd-java@0?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmina-sshd-java@0%3Fdistro=trixie

url	pkg:deb/debian/libmina-sshd-java@2.13.2-2?distro=trixie
purl	pkg:deb/debian/libmina-sshd-java@2.13.2-2?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmina-sshd-java@2.13.2-2%3Fdistro=trixie

url	pkg:deb/debian/libmina-sshd-java@2.13.2-3?distro=trixie
purl	pkg:deb/debian/libmina-sshd-java@2.13.2-3?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libmina-sshd-java@2.13.2-3%3Fdistro=trixie

url	pkg:maven/org.apache.sshd/sshd@2.9.3
purl	pkg:maven/org.apache.sshd/sshd@2.9.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.9.3

url pkg:maven/org.apache.sshd/sshd-common@2.9.3

purl pkg:maven/org.apache.sshd/sshd-common@2.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.9.3

url pkg:maven/org.apache.sshd/sshd-common@2.10.0

purl pkg:maven/org.apache.sshd/sshd-common@2.10.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.10.0

url pkg:maven/org.apache.sshd/sshd-core@2.1.0

purl pkg:maven/org.apache.sshd/sshd-core@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@2.1.0

url	pkg:maven/org.apache.sshd/sshd-core@2.10.0
purl	pkg:maven/org.apache.sshd/sshd-core@2.10.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@2.10.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

purl pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

url	pkg:maven/org.apache.sshd/sshd-sftp@2.10.0
purl	pkg:maven/org.apache.sshd/sshd-sftp@2.10.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.10.0

Affected_packages

url pkg:maven/org.apache.directory.mina/mina@1.0.0

purl pkg:maven/org.apache.directory.mina/mina@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.directory.mina/mina@1.0.0

url pkg:maven/org.apache.sshd/sshd@1.0.0

purl pkg:maven/org.apache.sshd/sshd@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.0.0

url pkg:maven/org.apache.sshd/sshd@1.1.0

purl pkg:maven/org.apache.sshd/sshd@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.1.0

url pkg:maven/org.apache.sshd/sshd@1.1.1

purl pkg:maven/org.apache.sshd/sshd@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.1.1

url pkg:maven/org.apache.sshd/sshd@1.2.0

purl pkg:maven/org.apache.sshd/sshd@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.2.0

url pkg:maven/org.apache.sshd/sshd@1.3.0

purl pkg:maven/org.apache.sshd/sshd@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.3.0

url pkg:maven/org.apache.sshd/sshd@1.4.0

purl pkg:maven/org.apache.sshd/sshd@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.4.0

url pkg:maven/org.apache.sshd/sshd@1.6.0

purl pkg:maven/org.apache.sshd/sshd@1.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.6.0

url pkg:maven/org.apache.sshd/sshd@1.7.0

purl pkg:maven/org.apache.sshd/sshd@1.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@1.7.0

url pkg:maven/org.apache.sshd/sshd@2.0.0

purl pkg:maven/org.apache.sshd/sshd@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.0.0

url pkg:maven/org.apache.sshd/sshd@2.1.0

purl pkg:maven/org.apache.sshd/sshd@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.1.0

url pkg:maven/org.apache.sshd/sshd@2.2.0

purl pkg:maven/org.apache.sshd/sshd@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.2.0

url pkg:maven/org.apache.sshd/sshd@2.3.0

purl pkg:maven/org.apache.sshd/sshd@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.3.0

url pkg:maven/org.apache.sshd/sshd@2.4.0

purl pkg:maven/org.apache.sshd/sshd@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.4.0

url pkg:maven/org.apache.sshd/sshd@2.5.0

purl pkg:maven/org.apache.sshd/sshd@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.5.0

url pkg:maven/org.apache.sshd/sshd@2.5.1

purl pkg:maven/org.apache.sshd/sshd@2.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.5.1

url pkg:maven/org.apache.sshd/sshd@2.6.0

purl pkg:maven/org.apache.sshd/sshd@2.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.6.0

url pkg:maven/org.apache.sshd/sshd@2.7.0

purl pkg:maven/org.apache.sshd/sshd@2.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.7.0

url pkg:maven/org.apache.sshd/sshd@2.8.0

purl pkg:maven/org.apache.sshd/sshd@2.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.8.0

url pkg:maven/org.apache.sshd/sshd@2.9.0

purl pkg:maven/org.apache.sshd/sshd@2.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.9.0

url pkg:maven/org.apache.sshd/sshd@2.9.1

purl pkg:maven/org.apache.sshd/sshd@2.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.9.1

url pkg:maven/org.apache.sshd/sshd@2.9.2

purl pkg:maven/org.apache.sshd/sshd@2.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd@2.9.2

url pkg:maven/org.apache.sshd/sshd-common@1.0.0

purl pkg:maven/org.apache.sshd/sshd-common@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@1.0.0

url pkg:maven/org.apache.sshd/sshd-common@2.1.0

purl pkg:maven/org.apache.sshd/sshd-common@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.1.0

url pkg:maven/org.apache.sshd/sshd-common@2.2.0

purl pkg:maven/org.apache.sshd/sshd-common@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.2.0

url pkg:maven/org.apache.sshd/sshd-common@2.3.0

purl pkg:maven/org.apache.sshd/sshd-common@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.3.0

url pkg:maven/org.apache.sshd/sshd-common@2.4.0

purl pkg:maven/org.apache.sshd/sshd-common@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.4.0

url pkg:maven/org.apache.sshd/sshd-common@2.5.0

purl pkg:maven/org.apache.sshd/sshd-common@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.5.0

url pkg:maven/org.apache.sshd/sshd-common@2.5.1

purl pkg:maven/org.apache.sshd/sshd-common@2.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.5.1

url pkg:maven/org.apache.sshd/sshd-common@2.6.0

purl pkg:maven/org.apache.sshd/sshd-common@2.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.6.0

url pkg:maven/org.apache.sshd/sshd-common@2.7.0

purl pkg:maven/org.apache.sshd/sshd-common@2.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.7.0

url pkg:maven/org.apache.sshd/sshd-common@2.8.0

purl pkg:maven/org.apache.sshd/sshd-common@2.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.8.0

url pkg:maven/org.apache.sshd/sshd-common@2.9.0

purl pkg:maven/org.apache.sshd/sshd-common@2.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.9.0

url pkg:maven/org.apache.sshd/sshd-common@2.9.1

purl pkg:maven/org.apache.sshd/sshd-common@2.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.9.1

url pkg:maven/org.apache.sshd/sshd-common@2.9.2

purl pkg:maven/org.apache.sshd/sshd-common@2.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.9.2

url pkg:maven/org.apache.sshd/sshd-common@2.9.3

purl pkg:maven/org.apache.sshd/sshd-common@2.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-zxcy-vvmk-xbag

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-common@2.9.3

url pkg:maven/org.apache.sshd/sshd-core@1.0.0

purl pkg:maven/org.apache.sshd/sshd-core@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.0.0

url pkg:maven/org.apache.sshd/sshd-core@1.1.0

purl pkg:maven/org.apache.sshd/sshd-core@1.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.1.0

url pkg:maven/org.apache.sshd/sshd-core@1.1.1

purl pkg:maven/org.apache.sshd/sshd-core@1.1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.1.1

url pkg:maven/org.apache.sshd/sshd-core@1.2.0

purl pkg:maven/org.apache.sshd/sshd-core@1.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.2.0

url pkg:maven/org.apache.sshd/sshd-core@1.3.0

purl pkg:maven/org.apache.sshd/sshd-core@1.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.3.0

url pkg:maven/org.apache.sshd/sshd-core@1.4.0

purl pkg:maven/org.apache.sshd/sshd-core@1.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.4.0

url pkg:maven/org.apache.sshd/sshd-core@1.6.0

purl pkg:maven/org.apache.sshd/sshd-core@1.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.6.0

url pkg:maven/org.apache.sshd/sshd-core@1.7.0

purl pkg:maven/org.apache.sshd/sshd-core@1.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@1.7.0

url pkg:maven/org.apache.sshd/sshd-core@2.0.0

purl pkg:maven/org.apache.sshd/sshd-core@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-31an-9pvw-uqf6

vulnerability	VCID-netd-rr9e-wbg5

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-core@2.0.0

url pkg:maven/org.apache.sshd/sshd-sftp@1.0.0

purl pkg:maven/org.apache.sshd/sshd-sftp@1.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@1.0.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.0.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.0.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.1.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.1.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.1.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.2.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.2.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.2.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.3.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.3.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.3.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.4.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.4.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.4.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.5.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.5.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.5.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.5.1

purl pkg:maven/org.apache.sshd/sshd-sftp@2.5.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.5.1

url pkg:maven/org.apache.sshd/sshd-sftp@2.6.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.6.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.6.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.7.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.7.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.7.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.8.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.8.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.8.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.9.0

purl pkg:maven/org.apache.sshd/sshd-sftp@2.9.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.9.0

url pkg:maven/org.apache.sshd/sshd-sftp@2.9.1

purl pkg:maven/org.apache.sshd/sshd-sftp@2.9.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.9.1

url pkg:maven/org.apache.sshd/sshd-sftp@2.9.2

purl pkg:maven/org.apache.sshd/sshd-sftp@2.9.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.9.2

url pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

purl pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.sshd/sshd-sftp@2.9.3

url pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el7eap

purl pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1%3Farch=el7eap

url pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.2.28-1.SP1_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el9eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1%3Farch=el9eap

url pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el8eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1%3Farch=el8eap

url pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el7eap

purl pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1?arch=el7eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5781-s1ny-q7ey

vulnerability	VCID-9xw3-4a4u-hbbb

vulnerability	VCID-r4e4-u4s6-63gc

vulnerability	VCID-vf46-vrr9-k7c6

vulnerability	VCID-y3mv-vmwd-tydt

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.4.14-5.GA_redhat_00002.1%3Farch=el7eap

url pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-apache-sshd@2.12.0-1.redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-eclipse-jgit@6.6.1.202309021850-1.r_redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-log4j@2.19.0-2.redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-lucene-solr@8.11.2-2.redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1?arch=el9eap

purl pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1%3Farch=el9eap

url pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1?arch=el8eap

purl pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-parsson@1.1.5-1.redhat_00001.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1?arch=el8eap

purl pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1?arch=el8eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1%3Farch=el8eap

url pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1?arch=el9eap

purl pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1?arch=el9eap

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-57td-u46f-skfq

vulnerability	VCID-gckj-wdhj-wfhe

vulnerability	VCID-jzn6-bzzf-nugp

vulnerability	VCID-r4e4-u4s6-63gc

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap8-wildfly@8.0.1-3.GA_redhat_00002.1%3Farch=el9eap

References

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35887.json

reference_id

reference_type

scores

value	4.3
scoring_system	cvssv3
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-35887.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2023-35887

reference_id

reference_type

scores

value	0.001
scoring_system	epss
scoring_elements	0.27787
published_at	2026-04-02T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.2718
published_at	2026-05-05T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27826
published_at	2026-04-04T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27726
published_at	2026-04-09T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27683
published_at	2026-04-08T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27617
published_at	2026-04-07T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27574
published_at	2026-04-21T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27613
published_at	2026-04-18T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27639
published_at	2026-04-16T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27629
published_at	2026-04-13T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27687
published_at	2026-04-12T12:55:00Z

value	0.001
scoring_system	epss
scoring_elements	0.27731
published_at	2026-04-11T12:55:00Z

value	0.00103
scoring_system	epss
scoring_elements	0.27869
published_at	2026-04-26T12:55:00Z

value	0.00103
scoring_system	epss
scoring_elements	0.27982
published_at	2026-04-24T12:55:00Z

value	0.00103
scoring_system	epss
scoring_elements	0.27793
published_at	2026-04-29T12:55:00Z

value	0.00106
scoring_system	epss
scoring_elements	0.28362
published_at	2026-05-09T12:55:00Z

value	0.00106
scoring_system	epss
scoring_elements	0.28379
published_at	2026-05-14T12:55:00Z

value	0.00106
scoring_system	epss
scoring_elements	0.28305
published_at	2026-05-12T12:55:00Z

value	0.00106
scoring_system	epss
scoring_elements	0.28338
published_at	2026-05-07T12:55:00Z

value	0.00106
scoring_system	epss
scoring_elements	0.28283
published_at	2026-05-11T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2023-35887

reference_url

https://github.com/apache/mina-sshd

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/apache/mina-sshd

reference_url

https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0

reference_url

https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0

reference_url

https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/apache/mina-sshd/commit/c20739b43aab0f7bf2ccad982a6cb37b9d5a8a0b

reference_url

https://github.com/apache/mina-sshd/pull/362

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://github.com/apache/mina-sshd/pull/362

reference_url

https://issues.apache.org/jira/browse/SSHD-1324

reference_id

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://issues.apache.org/jira/browse/SSHD-1324

reference_url

https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2

reference_id

reference_type

scores

value	5
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

value	Track
scoring_system	ssvc
scoring_elements	SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-07T19:40:36Z/

url

https://lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=2240036
reference_id	2240036
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=2240036

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2023-35887

reference_id

CVE-2023-35887

reference_type

scores

value	5.0
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

value	MODERATE
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2023-35887

reference_url

https://github.com/advisories/GHSA-mjmq-gwgm-5qhm

reference_id

GHSA-mjmq-gwgm-5qhm

reference_type

scores

value	MODERATE
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-mjmq-gwgm-5qhm

reference_url	https://access.redhat.com/errata/RHSA-2024:1192
reference_id	RHSA-2024:1192
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:1192

reference_url	https://access.redhat.com/errata/RHSA-2024:1193
reference_id	RHSA-2024:1193
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2024:1193

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	22
name	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Exploits

Severity_range_score 4.0 - 6.9

Exploitability 0.5

Weighted_severity 6.2

Risk_score 3.1

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r4e4-u4s6-63gc

Vulnerability Instance