Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-deyj-wzqb-9be8
SummaryJSNAPy is an open source python version of Junos Snapshot Administrator developed by Juniper available through github. The default configuration and sample files of JSNAPy automation tool versions prior to 1.3.0 are created world writable. This insecure file and directory permission allows unprivileged local users to alter the files under this directory including inserting operations not intended by the package maintainer, system administrator, or other users. This issue only affects users who downloaded and installed JSNAPy from github.
Aliases
0
alias CVE-2018-0023
1
alias GHSA-qc55-vm3j-74gp
2
alias PYSEC-2018-84
Fixed_packages
0
url pkg:pypi/jsnapy@1.3.0
purl pkg:pypi/jsnapy@1.3.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.3.0
Affected_packages
0
url pkg:pypi/jsnapy@1.0.0
purl pkg:pypi/jsnapy@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-deyj-wzqb-9be8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.0.0
1
url pkg:pypi/jsnapy@1.1.0
purl pkg:pypi/jsnapy@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-deyj-wzqb-9be8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.1.0
2
url pkg:pypi/jsnapy@1.2.0
purl pkg:pypi/jsnapy@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-deyj-wzqb-9be8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.2.0
3
url pkg:pypi/jsnapy@1.2.1
purl pkg:pypi/jsnapy@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-deyj-wzqb-9be8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.2.1
4
url pkg:pypi/jsnapy@1.2.2
purl pkg:pypi/jsnapy@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-deyj-wzqb-9be8
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/jsnapy@1.2.2
References
0
reference_url https://github.com/advisories/GHSA-qc55-vm3j-74gp
reference_id
reference_type
scores
url https://github.com/advisories/GHSA-qc55-vm3j-74gp
1
reference_url https://github.com/Juniper/jsnapy
reference_id
reference_type
scores
url https://github.com/Juniper/jsnapy
2
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/jsnapy/PYSEC-2018-84.yaml
reference_id
reference_type
scores
url https://github.com/pypa/advisory-database/tree/main/vulns/jsnapy/PYSEC-2018-84.yaml
3
reference_url https://kb.juniper.net/JSA10856
reference_id
reference_type
scores
url https://kb.juniper.net/JSA10856
4
reference_url https://web.archive.org/web/20200227125151/http://www.securityfocus.com/bid/103745
reference_id
reference_type
scores
url https://web.archive.org/web/20200227125151/http://www.securityfocus.com/bid/103745
5
reference_url http://www.securityfocus.com/bid/103745
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/103745
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2018-0023
reference_id CVE-2018-0023
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2018-0023
Weaknesses
0
cwe_id 276
name Incorrect Default Permissions
description During installation, installed file permissions are set to allow anyone to modify those files.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-deyj-wzqb-9be8