Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-b3qb-26ae-mbbr
SummaryModerate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core
Aliases
0
alias GHSA-cgpw-2gph-2r9g
1
alias GMS-2018-36
2
alias GMS-2018-38
3
alias GMS-2018-44
Fixed_packages
0
url pkg:nuget/Microsoft.AspNetCore.All@2.0.9
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hdbe-awrv-h7bm
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.9
1
url pkg:nuget/Microsoft.AspNetCore.All@2.1.2
purl pkg:nuget/Microsoft.AspNetCore.All@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-65aq-gaga-r7cg
1
vulnerability VCID-a7a3-pw5f-7bhg
2
vulnerability VCID-bckj-mtwp-gybj
3
vulnerability VCID-dkjj-cms2-5ufm
4
vulnerability VCID-e1yr-gajh-hka1
5
vulnerability VCID-e22q-3qhq-8yh4
6
vulnerability VCID-m9tr-vfjs-yqbm
7
vulnerability VCID-xxfz-qp6h-3bg8
8
vulnerability VCID-zqhf-pzay-b3he
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.2
2
url pkg:nuget/Microsoft.AspNetCore.App@2.1.2
purl pkg:nuget/Microsoft.AspNetCore.App@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4n4v-cw6k-2qfd
1
vulnerability VCID-bckj-mtwp-gybj
2
vulnerability VCID-dkjj-cms2-5ufm
3
vulnerability VCID-dvab-q7k2-duh1
4
vulnerability VCID-e1yr-gajh-hka1
5
vulnerability VCID-m9tr-vfjs-yqbm
6
vulnerability VCID-vvk6-g3gh-tkhh
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.2
3
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.4
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.4
4
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.2
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-m9tr-vfjs-yqbm
2
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.2
Affected_packages
0
url pkg:nuget/Microsoft.AspNetCore.All@2.0.0
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7z69-bmpz-9yhe
1
vulnerability VCID-84kb-vy5q-7kgs
2
vulnerability VCID-b3qb-26ae-mbbr
3
vulnerability VCID-b4cu-eu43-t3ek
4
vulnerability VCID-fxgf-qu8b-zfcc
5
vulnerability VCID-gare-6r2r-6fg9
6
vulnerability VCID-hdbe-awrv-h7bm
7
vulnerability VCID-pdc2-2w5p-yyc5
8
vulnerability VCID-syae-nwdz-judw
9
vulnerability VCID-ypsj-5zy2-1ucg
10
vulnerability VCID-z4e1-by1e-yfby
11
vulnerability VCID-zfck-2vhr-43hk
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.0
1
url pkg:nuget/Microsoft.AspNetCore.All@2.0.3
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b3qb-26ae-mbbr
1
vulnerability VCID-hdbe-awrv-h7bm
2
vulnerability VCID-pdc2-2w5p-yyc5
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.3
2
url pkg:nuget/Microsoft.AspNetCore.All@2.0.5
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b3qb-26ae-mbbr
1
vulnerability VCID-hdbe-awrv-h7bm
2
vulnerability VCID-pdc2-2w5p-yyc5
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.5
3
url pkg:nuget/Microsoft.AspNetCore.All@2.0.6
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b3qb-26ae-mbbr
1
vulnerability VCID-hdbe-awrv-h7bm
2
vulnerability VCID-pdc2-2w5p-yyc5
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.6
4
url pkg:nuget/Microsoft.AspNetCore.All@2.0.7
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b3qb-26ae-mbbr
1
vulnerability VCID-hdbe-awrv-h7bm
2
vulnerability VCID-pdc2-2w5p-yyc5
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.7
5
url pkg:nuget/Microsoft.AspNetCore.All@2.0.8
purl pkg:nuget/Microsoft.AspNetCore.All@2.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b3qb-26ae-mbbr
1
vulnerability VCID-hdbe-awrv-h7bm
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.0.8
6
url pkg:nuget/Microsoft.AspNetCore.All@2.1.0
purl pkg:nuget/Microsoft.AspNetCore.All@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2s5v-422t-tubj
1
vulnerability VCID-4n4v-cw6k-2qfd
2
vulnerability VCID-64w6-ejz1-6yfe
3
vulnerability VCID-65aq-gaga-r7cg
4
vulnerability VCID-a7a3-pw5f-7bhg
5
vulnerability VCID-b3qb-26ae-mbbr
6
vulnerability VCID-bckj-mtwp-gybj
7
vulnerability VCID-dkjj-cms2-5ufm
8
vulnerability VCID-dvab-q7k2-duh1
9
vulnerability VCID-e1yr-gajh-hka1
10
vulnerability VCID-e22q-3qhq-8yh4
11
vulnerability VCID-hdbe-awrv-h7bm
12
vulnerability VCID-m9tr-vfjs-yqbm
13
vulnerability VCID-vvk6-g3gh-tkhh
14
vulnerability VCID-xxfz-qp6h-3bg8
15
vulnerability VCID-zqhf-pzay-b3he
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.0
7
url pkg:nuget/Microsoft.AspNetCore.All@2.1.1
purl pkg:nuget/Microsoft.AspNetCore.All@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-65aq-gaga-r7cg
1
vulnerability VCID-a7a3-pw5f-7bhg
2
vulnerability VCID-b3qb-26ae-mbbr
3
vulnerability VCID-bckj-mtwp-gybj
4
vulnerability VCID-dkjj-cms2-5ufm
5
vulnerability VCID-e1yr-gajh-hka1
6
vulnerability VCID-e22q-3qhq-8yh4
7
vulnerability VCID-m9tr-vfjs-yqbm
8
vulnerability VCID-xxfz-qp6h-3bg8
9
vulnerability VCID-zqhf-pzay-b3he
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.All@2.1.1
8
url pkg:nuget/Microsoft.AspNetCore.App@2.1.0
purl pkg:nuget/Microsoft.AspNetCore.App@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4n4v-cw6k-2qfd
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-bckj-mtwp-gybj
3
vulnerability VCID-dkjj-cms2-5ufm
4
vulnerability VCID-dvab-q7k2-duh1
5
vulnerability VCID-e1yr-gajh-hka1
6
vulnerability VCID-m9tr-vfjs-yqbm
7
vulnerability VCID-vvk6-g3gh-tkhh
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.0
9
url pkg:nuget/Microsoft.AspNetCore.App@2.1.1
purl pkg:nuget/Microsoft.AspNetCore.App@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4n4v-cw6k-2qfd
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-bckj-mtwp-gybj
3
vulnerability VCID-dkjj-cms2-5ufm
4
vulnerability VCID-dvab-q7k2-duh1
5
vulnerability VCID-e1yr-gajh-hka1
6
vulnerability VCID-m9tr-vfjs-yqbm
7
vulnerability VCID-vvk6-g3gh-tkhh
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.App@2.1.1
10
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-b4cu-eu43-t3ek
3
vulnerability VCID-pdc2-2w5p-yyc5
4
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0
11
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-b4cu-eu43-t3ek
3
vulnerability VCID-pdc2-2w5p-yyc5
4
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1
12
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.2
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-pdc2-2w5p-yyc5
3
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.2
13
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.3
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.0.3
14
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.0
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-m9tr-vfjs-yqbm
3
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.0
15
url pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.1
purl pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5jzu-72q8-6kds
1
vulnerability VCID-b3qb-26ae-mbbr
2
vulnerability VCID-m9tr-vfjs-yqbm
3
vulnerability VCID-zshz-nwce-xfbj
resource_url http://public2.vulnerablecode.io/packages/pkg:nuget/Microsoft.AspNetCore.Server.Kestrel.Core@2.1.1
References
0
reference_url https://github.com/aspnet/Announcements/issues/311
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/aspnet/Announcements/issues/311
1
reference_url https://github.com/advisories/GHSA-cgpw-2gph-2r9g
reference_id GHSA-cgpw-2gph-2r9g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-cgpw-2gph-2r9g
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-b3qb-26ae-mbbr