Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kxc3-vz2c-wqca
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
Aliases
0
alias CVE-2007-5461
1
alias GHSA-v5p2-vg3c-pmrr
Fixed_packages
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.0.0
purl pkg:maven/org.apache.tomcat/tomcat@4.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2af1-rv9j-jugv
1
vulnerability VCID-2jws-wtvg-2khf
2
vulnerability VCID-aywp-amq3-yyes
3
vulnerability VCID-ccfn-tde4-s7hr
4
vulnerability VCID-hxer-p6va-7kdh
5
vulnerability VCID-kxc3-vz2c-wqca
6
vulnerability VCID-sjn3-a6fs-gyck
7
vulnerability VCID-w8uj-zy2r-fyca
8
vulnerability VCID-wpnp-3yad-ybcj
9
vulnerability VCID-zam7-79x3-ekg3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.0.0
1
url pkg:maven/org.apache.tomcat/tomcat@4.0.6
purl pkg:maven/org.apache.tomcat/tomcat@4.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jws-wtvg-2khf
1
vulnerability VCID-96yu-fvee-wfbs
2
vulnerability VCID-kxc3-vz2c-wqca
3
vulnerability VCID-sjn3-a6fs-gyck
4
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.0.6
2
url pkg:maven/org.apache.tomcat/tomcat@4.1.0
purl pkg:maven/org.apache.tomcat/tomcat@4.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2af1-rv9j-jugv
1
vulnerability VCID-2jws-wtvg-2khf
2
vulnerability VCID-5jm8-9upn-g7f4
3
vulnerability VCID-7787-4bwm-efgq
4
vulnerability VCID-96yu-fvee-wfbs
5
vulnerability VCID-ccfn-tde4-s7hr
6
vulnerability VCID-crhe-rt8j-wycu
7
vulnerability VCID-eygg-nt7y-qubh
8
vulnerability VCID-hmqa-jhuf-hfe2
9
vulnerability VCID-kxc3-vz2c-wqca
10
vulnerability VCID-qz87-x4zb-rud7
11
vulnerability VCID-rdr4-db3y-p3cz
12
vulnerability VCID-sjn3-a6fs-gyck
13
vulnerability VCID-t4mh-zvhq-27du
14
vulnerability VCID-wg7f-pjmn-uudk
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.0
3
url pkg:maven/org.apache.tomcat/tomcat@5.0.0
purl pkg:maven/org.apache.tomcat/tomcat@5.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-24v5-jpna-rqg9
1
vulnerability VCID-2af1-rv9j-jugv
2
vulnerability VCID-4t2h-jjhm-y7fq
3
vulnerability VCID-atus-ryef-17h1
4
vulnerability VCID-cqz2-4njt-g3da
5
vulnerability VCID-crhe-rt8j-wycu
6
vulnerability VCID-kxc3-vz2c-wqca
7
vulnerability VCID-qz87-x4zb-rud7
8
vulnerability VCID-w8uj-zy2r-fyca
9
vulnerability VCID-zam7-79x3-ekg3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.0.0
4
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2af1-rv9j-jugv
1
vulnerability VCID-46sr-9kr3-1ubw
2
vulnerability VCID-74c7-a56p-kufz
3
vulnerability VCID-7787-4bwm-efgq
4
vulnerability VCID-89e9-m968-vfhe
5
vulnerability VCID-9hm5-e4dw-6ffe
6
vulnerability VCID-9j31-459b-4qbm
7
vulnerability VCID-cqz2-4njt-g3da
8
vulnerability VCID-eawm-8v9w-yfap
9
vulnerability VCID-eygg-nt7y-qubh
10
vulnerability VCID-fu9h-e3jx-abe2
11
vulnerability VCID-hmqa-jhuf-hfe2
12
vulnerability VCID-jw6e-g8z9-43ej
13
vulnerability VCID-kxc3-vz2c-wqca
14
vulnerability VCID-pzkk-4e94-aqag
15
vulnerability VCID-qz87-x4zb-rud7
16
vulnerability VCID-rdr4-db3y-p3cz
17
vulnerability VCID-t4mh-zvhq-27du
18
vulnerability VCID-w6ay-nzvg-zbff
19
vulnerability VCID-w8uj-zy2r-fyca
20
vulnerability VCID-wg7f-pjmn-uudk
21
vulnerability VCID-wtke-y2cx-x3et
22
vulnerability VCID-y9yv-u4jh-mqew
23
vulnerability VCID-yvcg-96dp-r7e6
24
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
5
url pkg:maven/org.apache.tomcat/tomcat@5.5.25
purl pkg:maven/org.apache.tomcat/tomcat@5.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kxc3-vz2c-wqca
1
vulnerability VCID-qzyq-d6qk-67ag
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.25
6
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2kjh-4r2g-rqe6
1
vulnerability VCID-46sr-9kr3-1ubw
2
vulnerability VCID-4t2h-jjhm-y7fq
3
vulnerability VCID-5m85-3zyu-7qak
4
vulnerability VCID-6uuq-2a39-yubx
5
vulnerability VCID-74c7-a56p-kufz
6
vulnerability VCID-7787-4bwm-efgq
7
vulnerability VCID-89e9-m968-vfhe
8
vulnerability VCID-9hm5-e4dw-6ffe
9
vulnerability VCID-9j31-459b-4qbm
10
vulnerability VCID-aar2-398x-p3d8
11
vulnerability VCID-atus-ryef-17h1
12
vulnerability VCID-axzz-cadr-b7fv
13
vulnerability VCID-crhe-rt8j-wycu
14
vulnerability VCID-eawm-8v9w-yfap
15
vulnerability VCID-eygg-nt7y-qubh
16
vulnerability VCID-f4ka-47dk-zffs
17
vulnerability VCID-fu9h-e3jx-abe2
18
vulnerability VCID-fuxz-fqw3-ufa9
19
vulnerability VCID-hmqa-jhuf-hfe2
20
vulnerability VCID-hqzu-shyu-j3hp
21
vulnerability VCID-jw6e-g8z9-43ej
22
vulnerability VCID-kxc3-vz2c-wqca
23
vulnerability VCID-n4zk-mdyw-3fcz
24
vulnerability VCID-pq53-6deg-abfx
25
vulnerability VCID-pzkk-4e94-aqag
26
vulnerability VCID-qz87-x4zb-rud7
27
vulnerability VCID-qzyq-d6qk-67ag
28
vulnerability VCID-rdr4-db3y-p3cz
29
vulnerability VCID-redv-2x5y-8khx
30
vulnerability VCID-s37s-p75k-27e6
31
vulnerability VCID-t3ya-1w1r-h3dv
32
vulnerability VCID-t4mh-zvhq-27du
33
vulnerability VCID-tcmv-6ftg-fqen
34
vulnerability VCID-vsta-e8jg-4qa8
35
vulnerability VCID-w8uj-zy2r-fyca
36
vulnerability VCID-wg7f-pjmn-uudk
37
vulnerability VCID-wtke-y2cx-x3et
38
vulnerability VCID-y9yv-u4jh-mqew
39
vulnerability VCID-yswq-hnqg-sycs
40
vulnerability VCID-yvcg-96dp-r7e6
41
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
7
url pkg:maven/org.apache.tomcat/tomcat@6.0.14
purl pkg:maven/org.apache.tomcat/tomcat@6.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kxc3-vz2c-wqca
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.14
References
0
reference_url http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html
reference_id
reference_type
scores
url http://geronimo.apache.org/2007/10/18/potential-vulnerability-in-apache-tomcat-webdav-servlet.html
1
reference_url http://issues.apache.org/jira/browse/GERONIMO-3549
reference_id
reference_type
scores
url http://issues.apache.org/jira/browse/GERONIMO-3549
2
reference_url http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
3
reference_url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
reference_id
reference_type
scores
url http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
4
reference_url http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00001.html
5
reference_url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
6
reference_url http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705@apache.org%3E
reference_id
reference_type
scores
url http://mail-archives.apache.org/mod_mbox/tomcat-users/200710.mbox/%3C47135C2D.1000705@apache.org%3E
7
reference_url http://marc.info/?l=bugtraq&m=139344343412337&w=2
reference_id
reference_type
scores
url http://marc.info/?l=bugtraq&m=139344343412337&w=2
8
reference_url http://marc.info/?l=full-disclosure&m=119239530508382
reference_id
reference_type
scores
url http://marc.info/?l=full-disclosure&m=119239530508382
9
reference_url http://rhn.redhat.com/errata/RHSA-2008-0630.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2008-0630.html
10
reference_url http://security.gentoo.org/glsa/glsa-200804-10.xml
reference_id
reference_type
scores
url http://security.gentoo.org/glsa/glsa-200804-10.xml
11
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/37243
reference_id
reference_type
scores
url https://exchange.xforce.ibmcloud.com/vulnerabilities/37243
12
reference_url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@%3Cdev.tomcat.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74@%3Cdev.tomcat.apache.org%3E
16
reference_url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@%3Cdev.tomcat.apache.org%3E
19
reference_url http://support.apple.com/kb/HT2163
reference_id
reference_type
scores
url http://support.apple.com/kb/HT2163
20
reference_url http://support.apple.com/kb/HT3216
reference_id
reference_type
scores
url http://support.apple.com/kb/HT3216
21
reference_url https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html
reference_id
reference_type
scores
url https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00525.html
22
reference_url http://tomcat.apache.org/security-4.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-4.html
23
reference_url http://tomcat.apache.org/security-5.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-5.html
24
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
url http://tomcat.apache.org/security-6.html
25
reference_url http://www.debian.org/security/2008/dsa-1447
reference_id
reference_type
scores
url http://www.debian.org/security/2008/dsa-1447
26
reference_url http://www.debian.org/security/2008/dsa-1453
reference_id
reference_type
scores
url http://www.debian.org/security/2008/dsa-1453
27
reference_url http://www.redhat.com/support/errata/RHSA-2008-0042.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0042.html
28
reference_url http://www.redhat.com/support/errata/RHSA-2008-0195.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0195.html
29
reference_url http://www.redhat.com/support/errata/RHSA-2008-0261.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0261.html
30
reference_url http://www.redhat.com/support/errata/RHSA-2008-0862.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2008-0862.html
31
reference_url https://nvd.nist.gov/vuln/detail/CVE-2007-5461
reference_id CVE-2007-5461
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2007-5461
32
reference_url https://github.com/advisories/GHSA-v5p2-vg3c-pmrr
reference_id GHSA-v5p2-vg3c-pmrr
reference_type
scores
url https://github.com/advisories/GHSA-v5p2-vg3c-pmrr
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
2
cwe_id 352
name Cross-Site Request Forgery (CSRF)
description The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
3
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_scorenull
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kxc3-vz2c-wqca