Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-sapk-n2u2-a3de
Summary
Security researcher  Abdulrahman Alqabandi reported that
the fetch() API did not correctly implement the Cross-Origin
Resource Sharing (CORS) specification, allowing a malicious page to access
private data from other origins. Mozilla developer Ben Kelly
independently reported the same issue.
Aliases
0
alias CVE-2015-7184
Fixed_packages
0
url pkg:mozilla/Firefox@41.0.2
purl pkg:mozilla/Firefox@41.0.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:mozilla/Firefox@41.0.2
Affected_packages
References
0
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7184
reference_id CVE-2015-7184
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7184
1
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2015-115
reference_id mfsa2015-115
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2015-115
Weaknesses
Exploits
Severity_range_score7.0 - 8.9
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-sapk-n2u2-a3de