Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-bvab-encx-hfad
SummaryContao allows Use of a Key Past its Expiration Date.
Aliases
0
alias CVE-2019-10643
1
alias GHSA-j99g-qjvx-995g
Fixed_packages
0
url pkg:composer/contao/contao@4.7.3
purl pkg:composer/contao/contao@4.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-98fv-kpqs-mybc
1
vulnerability VCID-ah8s-8q49-8qbw
2
vulnerability VCID-u6sk-25yd-e7b2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/contao@4.7.3
1
url pkg:composer/contao/core-bundle@4.7.3
purl pkg:composer/contao/core-bundle@4.7.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fux-z15d-13g1
1
vulnerability VCID-98fv-kpqs-mybc
2
vulnerability VCID-ah8s-8q49-8qbw
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/core-bundle@4.7.3
Affected_packages
0
url pkg:composer/contao/contao@4.7.0
purl pkg:composer/contao/contao@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pp7-6avt-8faj
1
vulnerability VCID-98fv-kpqs-mybc
2
vulnerability VCID-ah8s-8q49-8qbw
3
vulnerability VCID-bvab-encx-hfad
4
vulnerability VCID-u6sk-25yd-e7b2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/contao@4.7.0
1
url pkg:composer/contao/core@4.7.0
purl pkg:composer/contao/core@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6pp7-6avt-8faj
1
vulnerability VCID-bvab-encx-hfad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/core@4.7.0
2
url pkg:composer/contao/core-bundle@4.7.1
purl pkg:composer/contao/core-bundle@4.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fux-z15d-13g1
1
vulnerability VCID-5kwa-7kx3-kfga
2
vulnerability VCID-6pp7-6avt-8faj
3
vulnerability VCID-98fv-kpqs-mybc
4
vulnerability VCID-ah8s-8q49-8qbw
5
vulnerability VCID-bvab-encx-hfad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/core-bundle@4.7.1
3
url pkg:composer/contao/core-bundle@4.7.2
purl pkg:composer/contao/core-bundle@4.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fux-z15d-13g1
1
vulnerability VCID-5kwa-7kx3-kfga
2
vulnerability VCID-6pp7-6avt-8faj
3
vulnerability VCID-98fv-kpqs-mybc
4
vulnerability VCID-ah8s-8q49-8qbw
5
vulnerability VCID-bvab-encx-hfad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/core-bundle@4.7.2
4
url pkg:composer/contao/core-bundle@4.7.0
purl pkg:composer/contao/core-bundle@4.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3fux-z15d-13g1
1
vulnerability VCID-5kwa-7kx3-kfga
2
vulnerability VCID-6pp7-6avt-8faj
3
vulnerability VCID-98fv-kpqs-mybc
4
vulnerability VCID-ah8s-8q49-8qbw
5
vulnerability VCID-bvab-encx-hfad
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/contao/core-bundle@4.7.0
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10643
reference_id
reference_type
scores
0
value 0.00428
scoring_system epss
scoring_elements 0.62774
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10643
1
reference_url https://contao.org/en/news.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://contao.org/en/news.html
2
reference_url https://contao.org/en/news/security-vulnerability-cve-2019-10643.html
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://contao.org/en/news/security-vulnerability-cve-2019-10643.html
3
reference_url https://github.com/contao/contao/commit/70348cc812b110831ad66a4f9857883f75649b88
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/contao/contao/commit/70348cc812b110831ad66a4f9857883f75649b88
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10643
reference_id CVE-2019-10643
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10643
5
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10643.yaml
reference_id CVE-2019-10643.YAML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/contao/CVE-2019-10643.yaml
6
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10643.yaml
reference_id CVE-2019-10643.YAML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/contao/core-bundle/CVE-2019-10643.yaml
7
reference_url https://github.com/advisories/GHSA-j99g-qjvx-995g
reference_id GHSA-j99g-qjvx-995g
reference_type
scores
url https://github.com/advisories/GHSA-j99g-qjvx-995g
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 320
name Key Management Errors
description Weaknesses in this category are related to errors in the management of cryptographic keys.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
4
cwe_id 324
name Use of a Key Past its Expiration Date
description The product uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-bvab-encx-hfad