Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/1928?format=api",
    "vulnerability_id": "VCID-werm-rpt3-cuad",
    "summary": "Security researcher Jordi Chancel discovered a variant of Mozilla Foundation\nSecurity Advisory 2015-136 which was fixed in Firefox 43. In the original bug, it\nwas possible to read cross-origin URLs following a redirect if\nperformance.getEntries() was used along with an iframe to host a page.\nNavigating back in history through script, content was pulled from the browser cache for\nthe redirected location instead of going to the original location. In the newly reported\nvariant issue, it was found that if a browser session was restored, history navigation\nwould still allow for the same attack as content was restored from the browser cache. This\nis a same-origin policy violation and could allow for data theft.",
    "aliases": [
        {
            "alias": "CVE-2016-1967"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/890?format=api",
            "purl": "pkg:mozilla/Firefox@45.0.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@45.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/900?format=api",
            "purl": "pkg:mozilla/Firefox%20ESR@38.8.0",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox%2520ESR@38.8.0"
        }
    ],
    "affected_packages": [],
    "references": [
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1967",
            "reference_id": "CVE-2016-1967",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1967"
        },
        {
            "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-29",
            "reference_id": "mfsa2016-29",
            "reference_type": "",
            "scores": [
                {
                    "value": "high",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2016-29"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "7.0 - 8.9",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-werm-rpt3-cuad"
}