{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/38078?format=json","vulnerability_id":"VCID-pnme-dc73-efcb","summary":"Improper Access Control\nThe File module in Drupal allows remote authenticated users to bypass access restrictions and read, delete, or substitute a link to a file uploaded to an unprocessed form by leveraging permission to create content or comment and upload files.","aliases":[{"alias":"CVE-2016-3162"},{"alias":"GHSA-w2pj-c8x5-jvg2"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/52631?format=json","purl":"pkg:composer/drupal/core@8.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4dpp-gg2v-q3et"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-e12q-qavs-qybu"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-jrhg-3271-tqdy"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-myja-t33q-q3cv"},{"vulnerability":"VCID-nwdx-mgsc-s3f3"},{"vulnerability":"VCID-pgnc-fq4m-3kaz"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-qsuc-53pg-zkda"},{"vulnerability":"VCID-t5ya-jzjf-ckh6"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-uvmv-j9kx-jfeq"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-yygb-pp11-5udj"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/52633?format=json","purl":"pkg:composer/drupal/drupal@8.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6rtn-zphz-sydn"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bndv-n7w9-43b4"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dnc7-jg8m-8fh3"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-eyew-pw17-ryfj"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-nn8g-m52e-5kfe"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-r4ja-mndm-uyge"},{"vulnerability":"VCID-tbah-jrah-a3fg"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-w3x8-db6e-kued"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.0.4"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/52630?format=json","purl":"pkg:composer/drupal/core@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-2c5f-q858-huaw"},{"vulnerability":"VCID-2fas-m6vh-myhc"},{"vulnerability":"VCID-2t34-82p3-73c3"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3pj1-y73r-vyhh"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4dpp-gg2v-q3et"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-4q59-j6u4-qfhk"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-67w7-gq9f-ukf1"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6s93-1cpz-yyg8"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-7ear-x9pf-yubc"},{"vulnerability":"VCID-7n7v-41m4-97gk"},{"vulnerability":"VCID-7v89-2sss-hfaz"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-9nk8-dban-g7h9"},{"vulnerability":"VCID-a3s2-c4k2-4ufn"},{"vulnerability":"VCID-a4u4-ga84-wyf9"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-b8fw-ya7y-h7d8"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-ckvk-xm4a-2qey"},{"vulnerability":"VCID-dav9-pgdh-8yey"},{"vulnerability":"VCID-deks-ns51-nbdg"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-e12q-qavs-qybu"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-edfu-7ege-hkf5"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-hay8-hvsq-33bm"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-jrhg-3271-tqdy"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-kzrs-mrga-nyej"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-myja-t33q-q3cv"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nwdx-mgsc-s3f3"},{"vulnerability":"VCID-p54u-b18k-jyft"},{"vulnerability":"VCID-pgnc-fq4m-3kaz"},{"vulnerability":"VCID-pmmq-8s2m-h7dp"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-pzp5-2bpz-jfe2"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-qj1a-e46b-b7fs"},{"vulnerability":"VCID-qsuc-53pg-zkda"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-t5ya-jzjf-ckh6"},{"vulnerability":"VCID-t89y-c9hq-9bhk"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-uq9s-79g7-rqh6"},{"vulnerability":"VCID-uvmv-j9kx-jfeq"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wgac-uvfw-8ufm"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-yq4q-hydz-vuga"},{"vulnerability":"VCID-yygb-pp11-5udj"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/203650?format=json","purl":"pkg:composer/drupal/core@8.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4dpp-gg2v-q3et"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-e12q-qavs-qybu"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-jrhg-3271-tqdy"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-myja-t33q-q3cv"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nwdx-mgsc-s3f3"},{"vulnerability":"VCID-pgnc-fq4m-3kaz"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-qsuc-53pg-zkda"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-t5ya-jzjf-ckh6"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-uvmv-j9kx-jfeq"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-yygb-pp11-5udj"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/203651?format=json","purl":"pkg:composer/drupal/core@8.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4dpp-gg2v-q3et"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-e12q-qavs-qybu"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-jrhg-3271-tqdy"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-myja-t33q-q3cv"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nwdx-mgsc-s3f3"},{"vulnerability":"VCID-pgnc-fq4m-3kaz"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-qsuc-53pg-zkda"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-t5ya-jzjf-ckh6"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-uvmv-j9kx-jfeq"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-yygb-pp11-5udj"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/52641?format=json","purl":"pkg:composer/drupal/core@8.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4dpp-gg2v-q3et"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-5jy9-mhbb-nuh7"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-e12q-qavs-qybu"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-jrhg-3271-tqdy"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-myja-t33q-q3cv"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nwdx-mgsc-s3f3"},{"vulnerability":"VCID-pgnc-fq4m-3kaz"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-qsuc-53pg-zkda"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-t5ya-jzjf-ckh6"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-uvmv-j9kx-jfeq"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-yygb-pp11-5udj"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/52632?format=json","purl":"pkg:composer/drupal/drupal@8.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-2w1s-g91k-xuhj"},{"vulnerability":"VCID-31qy-vagp-83b6"},{"vulnerability":"VCID-3dgm-qju3-aqh5"},{"vulnerability":"VCID-3qrs-sag2-v7g7"},{"vulnerability":"VCID-3xk4-qwaq-5yaj"},{"vulnerability":"VCID-4p4c-7rdc-37fa"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6rtn-zphz-sydn"},{"vulnerability":"VCID-73y5-3fud-9bac"},{"vulnerability":"VCID-766t-bnd6-ckcb"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-7n8f-bdkf-sqfu"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-9nk8-dban-g7h9"},{"vulnerability":"VCID-a4u4-ga84-wyf9"},{"vulnerability":"VCID-a7ss-tkb6-gkge"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-aqxx-kd18-pqgm"},{"vulnerability":"VCID-ard5-3cjv-1beu"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-avmn-kqky-83dd"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bndv-n7w9-43b4"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dnc7-jg8m-8fh3"},{"vulnerability":"VCID-dyhz-g3nv-yuc3"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-egtv-y9w1-skgr"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-eyew-pw17-ryfj"},{"vulnerability":"VCID-j7bj-atys-qfg3"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-mscp-wvvx-zfh3"},{"vulnerability":"VCID-n318-rcfy-uybg"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-nacy-y1qt-5yhb"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nn8g-m52e-5kfe"},{"vulnerability":"VCID-pmmq-8s2m-h7dp"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-pxwv-fhy9-ckfm"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-r4ja-mndm-uyge"},{"vulnerability":"VCID-rd4g-h1j9-23cb"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-s5qd-cpvc-c3cd"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbah-jrah-a3fg"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-tcan-28ga-j3h1"},{"vulnerability":"VCID-tpzm-u3qp-akc8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-vjz6-xgk6-mycf"},{"vulnerability":"VCID-w3x8-db6e-kued"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wsv7-je8g-sqet"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-xz7z-trbh-j7dk"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/203652?format=json","purl":"pkg:composer/drupal/drupal@8.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6rtn-zphz-sydn"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bndv-n7w9-43b4"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dnc7-jg8m-8fh3"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-eyew-pw17-ryfj"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-mscp-wvvx-zfh3"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nn8g-m52e-5kfe"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-r4ja-mndm-uyge"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-s5qd-cpvc-c3cd"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbah-jrah-a3fg"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-w3x8-db6e-kued"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/203653?format=json","purl":"pkg:composer/drupal/drupal@8.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6rtn-zphz-sydn"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bndv-n7w9-43b4"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dnc7-jg8m-8fh3"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-eyew-pw17-ryfj"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-mscp-wvvx-zfh3"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nn8g-m52e-5kfe"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-r4ja-mndm-uyge"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-s5qd-cpvc-c3cd"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbah-jrah-a3fg"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-w3x8-db6e-kued"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/203654?format=json","purl":"pkg:composer/drupal/drupal@8.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2989-fmjz-nkby"},{"vulnerability":"VCID-4pg6-hqge-wkcb"},{"vulnerability":"VCID-56ze-2yw2-bfh8"},{"vulnerability":"VCID-5c5c-m7ba-kqct"},{"vulnerability":"VCID-6c6t-kmb3-2qcm"},{"vulnerability":"VCID-6rtn-zphz-sydn"},{"vulnerability":"VCID-7bq1-m8df-k3ba"},{"vulnerability":"VCID-8qd6-8ckc-h3g5"},{"vulnerability":"VCID-ah3h-t9qa-gudr"},{"vulnerability":"VCID-asm8-guag-b3ep"},{"vulnerability":"VCID-ay6b-1a7z-qkas"},{"vulnerability":"VCID-bndv-n7w9-43b4"},{"vulnerability":"VCID-bq2j-t19h-zyad"},{"vulnerability":"VCID-dhwb-tvs2-vkht"},{"vulnerability":"VCID-dnc7-jg8m-8fh3"},{"vulnerability":"VCID-e8un-nbkk-cbf9"},{"vulnerability":"VCID-es39-uyu2-myap"},{"vulnerability":"VCID-eyew-pw17-ryfj"},{"vulnerability":"VCID-jb63-xjup-1khv"},{"vulnerability":"VCID-ks17-b29e-73au"},{"vulnerability":"VCID-mm13-6dhq-nqfb"},{"vulnerability":"VCID-mscp-wvvx-zfh3"},{"vulnerability":"VCID-n5n3-p5yy-13d9"},{"vulnerability":"VCID-ng6g-hvc2-bkg4"},{"vulnerability":"VCID-nn8g-m52e-5kfe"},{"vulnerability":"VCID-pnme-dc73-efcb"},{"vulnerability":"VCID-q6zh-decq-bkau"},{"vulnerability":"VCID-r4ja-mndm-uyge"},{"vulnerability":"VCID-rsc6-y1uv-6bfq"},{"vulnerability":"VCID-s5qd-cpvc-c3cd"},{"vulnerability":"VCID-ta99-gcmk-2qc8"},{"vulnerability":"VCID-tbah-jrah-a3fg"},{"vulnerability":"VCID-tbhc-6qre-7kc5"},{"vulnerability":"VCID-tbk2-zprq-27c8"},{"vulnerability":"VCID-ughj-q27r-yfe2"},{"vulnerability":"VCID-w3x8-db6e-kued"},{"vulnerability":"VCID-w4ks-ufnz-vfav"},{"vulnerability":"VCID-wapd-e3mu-sffn"},{"vulnerability":"VCID-wszp-2es5-z7fy"},{"vulnerability":"VCID-x34m-u169-1bce"},{"vulnerability":"VCID-y1nb-prqc-suaj"},{"vulnerability":"VCID-y5mz-1wsc-w3g7"},{"vulnerability":"VCID-z2xs-z24v-c3e5"},{"vulnerability":"VCID-zpeb-7dhc-9kcx"},{"vulnerability":"VCID-zqer-y4s4-hqhy"},{"vulnerability":"VCID-zvtm-9bd5-ufgy"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/drupal/drupal@8.0.3"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3162","reference_id":"","reference_type":"","scores":[{"value":"0.00294","scoring_system":"epss","scoring_elements":"0.52987","published_at":"2026-06-04T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2016-3162"},{"reference_url":"https://github.com/drupal/core","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/drupal/core"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-3162.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-3162.yaml"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-3162.yaml","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-3162.yaml"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3162","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3162"},{"reference_url":"https://www.drupal.org/SA-CORE-2016-001","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.drupal.org/SA-CORE-2016-001"},{"reference_url":"http://www.debian.org/security/2016/dsa-3498","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2016/dsa-3498"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/02/24/19","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2016/02/24/19"},{"reference_url":"http://www.openwall.com/lists/oss-security/2016/03/15/10","reference_id":"","reference_type":"","scores":[{"value":"8.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2016/03/15/10"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":284,"name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"8.0","risk_score":4.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pnme-dc73-efcb"}