Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-anqd-6ymu-pqhe

Summary

Cross-Site Request Forgery (CSRF)
Unspecified vulnerability in Jenkins before 1.502 and LTS before 1.480.3 allows remote attackers to bypass the CSRF protection mechanism via unknown attack vectors.

Aliases

alias	CVE-2013-0329

alias	GHSA-78cj-2m29-q5r9

Fixed_packages

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.480.3

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.502
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.502
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.502

Affected_packages

url pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

purl pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-3t7n-a654-suhv

vulnerability	VCID-anqd-6ymu-pqhe

vulnerability	VCID-mdu9-gpvt-6bca

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.481

References

reference_url	http://rhn.redhat.com/errata/RHSA-2013-0638.html
reference_id
reference_type
scores
url	http://rhn.redhat.com/errata/RHSA-2013-0638.html

reference_url	https://access.redhat.com/errata/RHSA-2013:0638
reference_id
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2013:0638

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=914877
reference_id
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=914877

reference_url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16
reference_id
reference_type
scores
url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2013-02-16

reference_url	http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb
reference_id
reference_type
scores
url	http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2013-02-16.cb

reference_url	http://www.openwall.com/lists/oss-security/2013/02/21/7
reference_id
reference_type
scores
url	http://www.openwall.com/lists/oss-security/2013/02/21/7

reference_url	https://access.redhat.com/security/cve/CVE-2013-0329
reference_id	CVE-2013-0329
reference_type
scores
url	https://access.redhat.com/security/cve/CVE-2013-0329

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2013-0329
reference_id	CVE-2013-0329
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2013-0329

reference_url	https://github.com/advisories/GHSA-78cj-2m29-q5r9
reference_id	GHSA-78cj-2m29-q5r9
reference_type
scores
url	https://github.com/advisories/GHSA-78cj-2m29-q5r9

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	352
name	Cross-Site Request Forgery (CSRF)
description	The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-anqd-6ymu-pqhe

Vulnerability Instance