Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-cp9j-3948-mud8
Summary
Insufficient Entropy
Entropy is lost in the `TokenGenerator`.
Aliases
0
alias GMS-2014-38
Fixed_packages
0
url pkg:composer/friendsofsymfony/user-bundle@1.3.0
purl pkg:composer/friendsofsymfony/user-bundle@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ky5a-sata-5yf6
1
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.3.0
Affected_packages
0
url pkg:composer/friendsofsymfony/user-bundle@1.2.0
purl pkg:composer/friendsofsymfony/user-bundle@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-98wp-9e1h-yfgg
1
vulnerability VCID-cp9j-3948-mud8
2
vulnerability VCID-fkq5-7t4p-jbdk
3
vulnerability VCID-ky5a-sata-5yf6
4
vulnerability VCID-nnxf-zbvz-1qdb
5
vulnerability VCID-sv3j-tu9a-pucg
6
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.0
1
url pkg:composer/friendsofsymfony/user-bundle@1.2.1
purl pkg:composer/friendsofsymfony/user-bundle@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cp9j-3948-mud8
1
vulnerability VCID-fkq5-7t4p-jbdk
2
vulnerability VCID-ky5a-sata-5yf6
3
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.1
2
url pkg:composer/friendsofsymfony/user-bundle@1.2.2
purl pkg:composer/friendsofsymfony/user-bundle@1.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cp9j-3948-mud8
1
vulnerability VCID-fkq5-7t4p-jbdk
2
vulnerability VCID-ky5a-sata-5yf6
3
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.2
3
url pkg:composer/friendsofsymfony/user-bundle@1.2.3
purl pkg:composer/friendsofsymfony/user-bundle@1.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cp9j-3948-mud8
1
vulnerability VCID-fkq5-7t4p-jbdk
2
vulnerability VCID-ky5a-sata-5yf6
3
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.3
4
url pkg:composer/friendsofsymfony/user-bundle@1.2.4
purl pkg:composer/friendsofsymfony/user-bundle@1.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cp9j-3948-mud8
1
vulnerability VCID-ky5a-sata-5yf6
2
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.4
5
url pkg:composer/friendsofsymfony/user-bundle@1.2.5
purl pkg:composer/friendsofsymfony/user-bundle@1.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cp9j-3948-mud8
1
vulnerability VCID-yyyq-za39-r3hh
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/friendsofsymfony/user-bundle@1.2.5
References
0
reference_url https://symfony.com/blog/fosuserbundle-entropy-of-generated-tokens-is-lost
reference_id
reference_type
scores
url https://symfony.com/blog/fosuserbundle-entropy-of-generated-tokens-is-lost
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-cp9j-3948-mud8