Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ngtu-qrdm-hucu
Summary
Security researcher Muneaki Nishimura (nishimunea) of Recruit
Technologies Co., Ltd. reported that the chrome.tabs.update API for web
extensions allows for navigation to javascript: URLs without additional
permissions. This can used to elevate privilege for a universal cross-site scripting (XSS)
attack by a malicious web extension. It can also be used to inject content into other
extensions if they load content within browser tabs.
Aliases
0
alias CVE-2016-2817
Fixed_packages
0
url pkg:mozilla/Firefox@46.0.0
purl pkg:mozilla/Firefox@46.0.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@46.0.0
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2817
reference_id CVE-2016-2817
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2817
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2016-46
reference_id mfsa2016-46
reference_type
scores
0
value none
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2016-46
Weaknesses
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ngtu-qrdm-hucu