Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-5zzh-vq9s-hfbh

Summary

CSRF vulnerability
The application is vulnerable to Cross-Site Request Forgery because of the lack of "protect_from_forgery" in the Rails controllers.

Aliases

alias	CVE-2015-4619

alias	GHSA-2hxv-mx8x-mcj9

Fixed_packages

url pkg:gem/spina@0.6.29

purl pkg:gem/spina@0.6.29

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.29

Affected_packages

url pkg:gem/spina@0.6.11

purl pkg:gem/spina@0.6.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.11

url pkg:gem/spina@0.6.12

purl pkg:gem/spina@0.6.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.12

url pkg:gem/spina@0.6.13

purl pkg:gem/spina@0.6.13

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.13

url pkg:gem/spina@0.6.14

purl pkg:gem/spina@0.6.14

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.14

url pkg:gem/spina@0.6.15

purl pkg:gem/spina@0.6.15

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.15

url pkg:gem/spina@0.6.16

purl pkg:gem/spina@0.6.16

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.16

url pkg:gem/spina@0.6.17

purl pkg:gem/spina@0.6.17

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.17

url pkg:gem/spina@0.6.18

purl pkg:gem/spina@0.6.18

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.18

url pkg:gem/spina@0.6.19

purl pkg:gem/spina@0.6.19

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.19

url pkg:gem/spina@0.6.20

purl pkg:gem/spina@0.6.20

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.20

url pkg:gem/spina@0.6.21

purl pkg:gem/spina@0.6.21

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.21

url pkg:gem/spina@0.6.22

purl pkg:gem/spina@0.6.22

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.22

url pkg:gem/spina@0.6.23

purl pkg:gem/spina@0.6.23

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.23

url pkg:gem/spina@0.6.24

purl pkg:gem/spina@0.6.24

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.24

url pkg:gem/spina@0.6.25

purl pkg:gem/spina@0.6.25

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.25

url pkg:gem/spina@0.6.26

purl pkg:gem/spina@0.6.26

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.26

url pkg:gem/spina@0.6.27

purl pkg:gem/spina@0.6.27

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.27

url pkg:gem/spina@0.6.28

purl pkg:gem/spina@0.6.28

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-4u2v-fy8u-vqbh

vulnerability	VCID-5zzh-vq9s-hfbh

vulnerability	VCID-w7p9-vg75-8qfc

resource_url http://public2.vulnerablecode.io/packages/pkg:gem/spina@0.6.28

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2015-4619

reference_id

reference_type

scores

value	0.00235
scoring_system	epss
scoring_elements	0.46532
published_at	2026-06-05T12:55:00Z

value	0.00235
scoring_system	epss
scoring_elements	0.46467
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2015-4619

reference_url

https://github.com/denkGroot/Spina

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/denkGroot/Spina

reference_url

https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/denkGroot/Spina/commit/bfe44f289e336f80b6593032679300c493735e75

reference_url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spina/CVE-2015-4619.yml

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/rubysec/ruby-advisory-db/blob/master/gems/spina/CVE-2015-4619.yml

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2015-4619

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2015-4619

reference_url

http://www.openwall.com/lists/oss-security/2015/06/16/11

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3
scoring_elements

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.openwall.com/lists/oss-security/2015/06/16/11

reference_url

http://www.openwall.com/lists/oss-security/2015/06/16/20

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.openwall.com/lists/oss-security/2015/06/16/20

reference_url

http://www.securityfocus.com/bid/75216

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

http://www.securityfocus.com/bid/75216

reference_url

https://github.com/advisories/GHSA-2hxv-mx8x-mcj9

reference_id

GHSA-2hxv-mx8x-mcj9

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-2hxv-mx8x-mcj9

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	352
name	Cross-Site Request Forgery (CSRF)
description	The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5zzh-vq9s-hfbh

Vulnerability Instance