Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-jr67-gaw6-8kef

Summary

Jenkins has Local File Inclusion Vulnerability
Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directory contents and read arbitrary files in the Jenkins servlet resources via directory traversal sequences in a request to jnlpJars/.

Aliases

alias	CVE-2015-5322

alias	GHSA-89vc-7frq-2rfj

Fixed_packages

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.625.2

url	pkg:maven/org.jenkins-ci.main/jenkins-core@1.638
purl	pkg:maven/org.jenkins-ci.main/jenkins-core@1.638
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.jenkins-ci.main/jenkins-core@1.638

Affected_packages

References

reference_url	https://access.redhat.com/errata/RHSA-2016:0070
reference_id
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2016:0070

reference_url	https://github.com/jenkinsci/jenkins
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins

reference_url	https://github.com/jenkinsci/jenkins/commit/5431e397216b4ab80e58bdabcb06a0066bce6592
reference_id
reference_type
scores
url	https://github.com/jenkinsci/jenkins/commit/5431e397216b4ab80e58bdabcb06a0066bce6592

reference_url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11
reference_id
reference_type
scores
url	https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2015-11-11

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2015-5322
reference_id	CVE-2015-5322
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2015-5322

reference_url	https://github.com/advisories/GHSA-89vc-7frq-2rfj
reference_id	GHSA-89vc-7frq-2rfj
reference_type
scores
url	https://github.com/advisories/GHSA-89vc-7frq-2rfj

Weaknesses

cwe_id	22
name	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jr67-gaw6-8kef

Vulnerability Instance