Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-9qx2-tr6c-sbby
SummarySilverstripe CSRF vulnerability in GridFieldAddExistingAutocompleter
Aliases
0
alias GHSA-2hpc-mf4q-j885
Fixed_packages
0
url pkg:composer/silverstripe/framework@3.1.17
purl pkg:composer/silverstripe/framework@3.1.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3497-71mw-yqh8
1
vulnerability VCID-4mg2-rjsn-qyfx
2
vulnerability VCID-6e1y-7jj8-a7cw
3
vulnerability VCID-7kmy-8ht6-8fcw
4
vulnerability VCID-7me4-ggep-sbhj
5
vulnerability VCID-7uum-b28k-nqbm
6
vulnerability VCID-7wzc-kyxs-wbc2
7
vulnerability VCID-91wy-94bg-bfc3
8
vulnerability VCID-9vwe-uejx-c3c5
9
vulnerability VCID-a95a-ygek-hfby
10
vulnerability VCID-bexp-ws1g-1fdu
11
vulnerability VCID-d9he-ahd2-xkde
12
vulnerability VCID-eu6p-szkb-m7b1
13
vulnerability VCID-k1aa-deyg-2kdg
14
vulnerability VCID-k6ed-y2ud-wffu
15
vulnerability VCID-km94-727n-nfa6
16
vulnerability VCID-ku6h-zhz1-8ydr
17
vulnerability VCID-m2bw-tabk-qyd8
18
vulnerability VCID-pq7w-n99a-q7cj
19
vulnerability VCID-u7hh-49t3-13df
20
vulnerability VCID-ud6e-smr7-vffw
21
vulnerability VCID-upvz-qc95-nua2
22
vulnerability VCID-uww2-1x5r-ufc6
23
vulnerability VCID-vrv4-sy3z-jfe2
24
vulnerability VCID-x6g5-a61e-3khu
25
vulnerability VCID-xazf-vmz5-r3dj
26
vulnerability VCID-yxg1-dz91-ckgs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.17
1
url pkg:composer/silverstripe/framework@3.2.2
purl pkg:composer/silverstripe/framework@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3497-71mw-yqh8
1
vulnerability VCID-4mg2-rjsn-qyfx
2
vulnerability VCID-6e1y-7jj8-a7cw
3
vulnerability VCID-7kmy-8ht6-8fcw
4
vulnerability VCID-7me4-ggep-sbhj
5
vulnerability VCID-7uum-b28k-nqbm
6
vulnerability VCID-7wzc-kyxs-wbc2
7
vulnerability VCID-91wy-94bg-bfc3
8
vulnerability VCID-9vwe-uejx-c3c5
9
vulnerability VCID-a95a-ygek-hfby
10
vulnerability VCID-bexp-ws1g-1fdu
11
vulnerability VCID-d9he-ahd2-xkde
12
vulnerability VCID-eu6p-szkb-m7b1
13
vulnerability VCID-k1aa-deyg-2kdg
14
vulnerability VCID-k6ed-y2ud-wffu
15
vulnerability VCID-km94-727n-nfa6
16
vulnerability VCID-ku6h-zhz1-8ydr
17
vulnerability VCID-m2bw-tabk-qyd8
18
vulnerability VCID-pq7w-n99a-q7cj
19
vulnerability VCID-u7hh-49t3-13df
20
vulnerability VCID-ud6e-smr7-vffw
21
vulnerability VCID-upvz-qc95-nua2
22
vulnerability VCID-uww2-1x5r-ufc6
23
vulnerability VCID-vrv4-sy3z-jfe2
24
vulnerability VCID-x6g5-a61e-3khu
25
vulnerability VCID-xazf-vmz5-r3dj
26
vulnerability VCID-yxg1-dz91-ckgs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.2
2
url pkg:composer/silverstripe/framework@3.3.0
purl pkg:composer/silverstripe/framework@3.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3497-71mw-yqh8
1
vulnerability VCID-4mg2-rjsn-qyfx
2
vulnerability VCID-6e1y-7jj8-a7cw
3
vulnerability VCID-7kmy-8ht6-8fcw
4
vulnerability VCID-7me4-ggep-sbhj
5
vulnerability VCID-7uum-b28k-nqbm
6
vulnerability VCID-7wzc-kyxs-wbc2
7
vulnerability VCID-8py4-rxgp-uqdh
8
vulnerability VCID-91wy-94bg-bfc3
9
vulnerability VCID-9vwe-uejx-c3c5
10
vulnerability VCID-a95a-ygek-hfby
11
vulnerability VCID-bexp-ws1g-1fdu
12
vulnerability VCID-c3wv-6zpv-zbfg
13
vulnerability VCID-d9he-ahd2-xkde
14
vulnerability VCID-eu6p-szkb-m7b1
15
vulnerability VCID-k1aa-deyg-2kdg
16
vulnerability VCID-k6ed-y2ud-wffu
17
vulnerability VCID-km94-727n-nfa6
18
vulnerability VCID-ku6h-zhz1-8ydr
19
vulnerability VCID-m2bw-tabk-qyd8
20
vulnerability VCID-pq7w-n99a-q7cj
21
vulnerability VCID-u7hh-49t3-13df
22
vulnerability VCID-ud6e-smr7-vffw
23
vulnerability VCID-upvz-qc95-nua2
24
vulnerability VCID-uww2-1x5r-ufc6
25
vulnerability VCID-vrv4-sy3z-jfe2
26
vulnerability VCID-x6g5-a61e-3khu
27
vulnerability VCID-xazf-vmz5-r3dj
28
vulnerability VCID-yxg1-dz91-ckgs
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.0
Affected_packages
0
url pkg:composer/silverstripe/framework@3.1.16
purl pkg:composer/silverstripe/framework@3.1.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yc7-8qd2-zfhm
1
vulnerability VCID-333j-w32t-ufhn
2
vulnerability VCID-3497-71mw-yqh8
3
vulnerability VCID-4mg2-rjsn-qyfx
4
vulnerability VCID-6e1y-7jj8-a7cw
5
vulnerability VCID-7kmy-8ht6-8fcw
6
vulnerability VCID-7me4-ggep-sbhj
7
vulnerability VCID-7uum-b28k-nqbm
8
vulnerability VCID-7wzc-kyxs-wbc2
9
vulnerability VCID-91wy-94bg-bfc3
10
vulnerability VCID-9qx2-tr6c-sbby
11
vulnerability VCID-9vwe-uejx-c3c5
12
vulnerability VCID-a95a-ygek-hfby
13
vulnerability VCID-bexp-ws1g-1fdu
14
vulnerability VCID-d9he-ahd2-xkde
15
vulnerability VCID-eu6p-szkb-m7b1
16
vulnerability VCID-k1aa-deyg-2kdg
17
vulnerability VCID-k6ed-y2ud-wffu
18
vulnerability VCID-km94-727n-nfa6
19
vulnerability VCID-ku6h-zhz1-8ydr
20
vulnerability VCID-m2bw-tabk-qyd8
21
vulnerability VCID-pq7w-n99a-q7cj
22
vulnerability VCID-rat4-3wbz-33fu
23
vulnerability VCID-u7hh-49t3-13df
24
vulnerability VCID-ud6e-smr7-vffw
25
vulnerability VCID-upvz-qc95-nua2
26
vulnerability VCID-uww2-1x5r-ufc6
27
vulnerability VCID-vrv4-sy3z-jfe2
28
vulnerability VCID-wnrg-ruds-wqb4
29
vulnerability VCID-x6g5-a61e-3khu
30
vulnerability VCID-xazf-vmz5-r3dj
31
vulnerability VCID-yxg1-dz91-ckgs
32
vulnerability VCID-zfrs-mqe3-4be8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.1.16
1
url pkg:composer/silverstripe/framework@3.2.0
purl pkg:composer/silverstripe/framework@3.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yc7-8qd2-zfhm
1
vulnerability VCID-333j-w32t-ufhn
2
vulnerability VCID-3497-71mw-yqh8
3
vulnerability VCID-4mg2-rjsn-qyfx
4
vulnerability VCID-6e1y-7jj8-a7cw
5
vulnerability VCID-7kmy-8ht6-8fcw
6
vulnerability VCID-7me4-ggep-sbhj
7
vulnerability VCID-7uum-b28k-nqbm
8
vulnerability VCID-7wzc-kyxs-wbc2
9
vulnerability VCID-91wy-94bg-bfc3
10
vulnerability VCID-9qx2-tr6c-sbby
11
vulnerability VCID-9vwe-uejx-c3c5
12
vulnerability VCID-a95a-ygek-hfby
13
vulnerability VCID-bexp-ws1g-1fdu
14
vulnerability VCID-c3wv-6zpv-zbfg
15
vulnerability VCID-d9he-ahd2-xkde
16
vulnerability VCID-empu-95n7-5qcq
17
vulnerability VCID-eu6p-szkb-m7b1
18
vulnerability VCID-farn-35ej-t7eg
19
vulnerability VCID-gw4m-zbjs-3fgx
20
vulnerability VCID-k1aa-deyg-2kdg
21
vulnerability VCID-k6ed-y2ud-wffu
22
vulnerability VCID-km94-727n-nfa6
23
vulnerability VCID-ku6h-zhz1-8ydr
24
vulnerability VCID-m2bw-tabk-qyd8
25
vulnerability VCID-pq7w-n99a-q7cj
26
vulnerability VCID-rat4-3wbz-33fu
27
vulnerability VCID-tzgn-vazz-7kct
28
vulnerability VCID-u7hh-49t3-13df
29
vulnerability VCID-ud6e-smr7-vffw
30
vulnerability VCID-upvz-qc95-nua2
31
vulnerability VCID-uww2-1x5r-ufc6
32
vulnerability VCID-vrv4-sy3z-jfe2
33
vulnerability VCID-wnrg-ruds-wqb4
34
vulnerability VCID-wxc6-ndg5-dqd9
35
vulnerability VCID-x6g5-a61e-3khu
36
vulnerability VCID-xazf-vmz5-r3dj
37
vulnerability VCID-yxg1-dz91-ckgs
38
vulnerability VCID-zfrs-mqe3-4be8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.0
2
url pkg:composer/silverstripe/framework@3.2.1
purl pkg:composer/silverstripe/framework@3.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yc7-8qd2-zfhm
1
vulnerability VCID-333j-w32t-ufhn
2
vulnerability VCID-3497-71mw-yqh8
3
vulnerability VCID-4mg2-rjsn-qyfx
4
vulnerability VCID-6e1y-7jj8-a7cw
5
vulnerability VCID-7kmy-8ht6-8fcw
6
vulnerability VCID-7me4-ggep-sbhj
7
vulnerability VCID-7uum-b28k-nqbm
8
vulnerability VCID-7wzc-kyxs-wbc2
9
vulnerability VCID-91wy-94bg-bfc3
10
vulnerability VCID-9qx2-tr6c-sbby
11
vulnerability VCID-9vwe-uejx-c3c5
12
vulnerability VCID-a95a-ygek-hfby
13
vulnerability VCID-bexp-ws1g-1fdu
14
vulnerability VCID-d9he-ahd2-xkde
15
vulnerability VCID-eu6p-szkb-m7b1
16
vulnerability VCID-k1aa-deyg-2kdg
17
vulnerability VCID-k6ed-y2ud-wffu
18
vulnerability VCID-km94-727n-nfa6
19
vulnerability VCID-ku6h-zhz1-8ydr
20
vulnerability VCID-m2bw-tabk-qyd8
21
vulnerability VCID-pq7w-n99a-q7cj
22
vulnerability VCID-rat4-3wbz-33fu
23
vulnerability VCID-u7hh-49t3-13df
24
vulnerability VCID-ud6e-smr7-vffw
25
vulnerability VCID-upvz-qc95-nua2
26
vulnerability VCID-uww2-1x5r-ufc6
27
vulnerability VCID-vrv4-sy3z-jfe2
28
vulnerability VCID-wnrg-ruds-wqb4
29
vulnerability VCID-x6g5-a61e-3khu
30
vulnerability VCID-xazf-vmz5-r3dj
31
vulnerability VCID-yxg1-dz91-ckgs
32
vulnerability VCID-zfrs-mqe3-4be8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.2.1
3
url pkg:composer/silverstripe/framework@3.3.0-beta1
purl pkg:composer/silverstripe/framework@3.3.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1yc7-8qd2-zfhm
1
vulnerability VCID-333j-w32t-ufhn
2
vulnerability VCID-3497-71mw-yqh8
3
vulnerability VCID-4mg2-rjsn-qyfx
4
vulnerability VCID-6e1y-7jj8-a7cw
5
vulnerability VCID-7kmy-8ht6-8fcw
6
vulnerability VCID-7me4-ggep-sbhj
7
vulnerability VCID-7uum-b28k-nqbm
8
vulnerability VCID-7wzc-kyxs-wbc2
9
vulnerability VCID-8py4-rxgp-uqdh
10
vulnerability VCID-91wy-94bg-bfc3
11
vulnerability VCID-9qx2-tr6c-sbby
12
vulnerability VCID-9vwe-uejx-c3c5
13
vulnerability VCID-a95a-ygek-hfby
14
vulnerability VCID-bexp-ws1g-1fdu
15
vulnerability VCID-d9he-ahd2-xkde
16
vulnerability VCID-eu6p-szkb-m7b1
17
vulnerability VCID-k1aa-deyg-2kdg
18
vulnerability VCID-k6ed-y2ud-wffu
19
vulnerability VCID-km94-727n-nfa6
20
vulnerability VCID-ku6h-zhz1-8ydr
21
vulnerability VCID-m2bw-tabk-qyd8
22
vulnerability VCID-pq7w-n99a-q7cj
23
vulnerability VCID-rat4-3wbz-33fu
24
vulnerability VCID-u7hh-49t3-13df
25
vulnerability VCID-ud6e-smr7-vffw
26
vulnerability VCID-upvz-qc95-nua2
27
vulnerability VCID-uww2-1x5r-ufc6
28
vulnerability VCID-vrv4-sy3z-jfe2
29
vulnerability VCID-wnrg-ruds-wqb4
30
vulnerability VCID-x6g5-a61e-3khu
31
vulnerability VCID-xazf-vmz5-r3dj
32
vulnerability VCID-yxg1-dz91-ckgs
33
vulnerability VCID-zfrs-mqe3-4be8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.0-beta1
4
url pkg:composer/silverstripe/framework@3.3.0-rc2
purl pkg:composer/silverstripe/framework@3.3.0-rc2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-333j-w32t-ufhn
1
vulnerability VCID-3497-71mw-yqh8
2
vulnerability VCID-4mg2-rjsn-qyfx
3
vulnerability VCID-6e1y-7jj8-a7cw
4
vulnerability VCID-7kmy-8ht6-8fcw
5
vulnerability VCID-7me4-ggep-sbhj
6
vulnerability VCID-7uum-b28k-nqbm
7
vulnerability VCID-7wzc-kyxs-wbc2
8
vulnerability VCID-8py4-rxgp-uqdh
9
vulnerability VCID-91wy-94bg-bfc3
10
vulnerability VCID-9qx2-tr6c-sbby
11
vulnerability VCID-9vwe-uejx-c3c5
12
vulnerability VCID-a95a-ygek-hfby
13
vulnerability VCID-bexp-ws1g-1fdu
14
vulnerability VCID-d9he-ahd2-xkde
15
vulnerability VCID-eu6p-szkb-m7b1
16
vulnerability VCID-k1aa-deyg-2kdg
17
vulnerability VCID-k6ed-y2ud-wffu
18
vulnerability VCID-km94-727n-nfa6
19
vulnerability VCID-ku6h-zhz1-8ydr
20
vulnerability VCID-m2bw-tabk-qyd8
21
vulnerability VCID-pq7w-n99a-q7cj
22
vulnerability VCID-u7hh-49t3-13df
23
vulnerability VCID-ud6e-smr7-vffw
24
vulnerability VCID-upvz-qc95-nua2
25
vulnerability VCID-uww2-1x5r-ufc6
26
vulnerability VCID-vrv4-sy3z-jfe2
27
vulnerability VCID-wnrg-ruds-wqb4
28
vulnerability VCID-x6g5-a61e-3khu
29
vulnerability VCID-xazf-vmz5-r3dj
30
vulnerability VCID-yxg1-dz91-ckgs
31
vulnerability VCID-zfrs-mqe3-4be8
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/silverstripe/framework@3.3.0-rc2
References
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-002-1.yaml
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/framework/SS-2016-002-1.yaml
1
reference_url https://github.com/silverstripe/silverstripe-framework
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework
2
reference_url https://github.com/silverstripe/silverstripe-framework/commit/013524af5069bb0cf909853f04418d9bef56d18c
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/013524af5069bb0cf909853f04418d9bef56d18c
3
reference_url https://github.com/silverstripe/silverstripe-framework/commit/56e92f5a32e45849cc9361c8603c31d7010c9d36
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/56e92f5a32e45849cc9361c8603c31d7010c9d36
4
reference_url https://github.com/silverstripe/silverstripe-framework/commit/e2c77c5a8f13e901c51a3684210811559b592f0c
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/silverstripe/silverstripe-framework/commit/e2c77c5a8f13e901c51a3684210811559b592f0c
5
reference_url https://www.silverstripe.org/download/security-releases/ss-2016-002
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.silverstripe.org/download/security-releases/ss-2016-002
6
reference_url https://github.com/advisories/GHSA-2hpc-mf4q-j885
reference_id GHSA-2hpc-mf4q-j885
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2hpc-mf4q-j885
Weaknesses
0
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-9qx2-tr6c-sbby