Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-eeee-eupn-z7bb
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information disclosure.
Aliases
0
alias CVE-2017-1000426
1
alias GHSA-g4rw-82hq-8jpr
Fixed_packages
0
url pkg:deb/debian/mapproxy@1.10.4-1?distro=trixie
purl pkg:deb/debian/mapproxy@1.10.4-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.10.4-1%3Fdistro=trixie
1
url pkg:deb/debian/mapproxy@1.11.0-3%2Bdeb10u1
purl pkg:deb/debian/mapproxy@1.11.0-3%2Bdeb10u1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.11.0-3%252Bdeb10u1
2
url pkg:deb/debian/mapproxy@1.13.0-1?distro=trixie
purl pkg:deb/debian/mapproxy@1.13.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.13.0-1%3Fdistro=trixie
3
url pkg:deb/debian/mapproxy@1.15.1-2?distro=trixie
purl pkg:deb/debian/mapproxy@1.15.1-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.15.1-2%3Fdistro=trixie
4
url pkg:deb/debian/mapproxy@4.0.2%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/mapproxy@4.0.2%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@4.0.2%252Bdfsg-2%3Fdistro=trixie
5
url pkg:deb/debian/mapproxy@6.0.1%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/mapproxy@6.0.1%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@6.0.1%252Bdfsg-2%3Fdistro=trixie
6
url pkg:deb/debian/mapproxy@6.1.0%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/mapproxy@6.1.0%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@6.1.0%252Bdfsg-1%3Fdistro=trixie
7
url pkg:pypi/mapproxy@1.10.4
purl pkg:pypi/mapproxy@1.10.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.10.4
8
url pkg:pypi/mapproxy@1.11.1
purl pkg:pypi/mapproxy@1.11.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.11.1
Affected_packages
0
url pkg:deb/debian/mapproxy@1.9.0-2~bpo8%2B1
purl pkg:deb/debian/mapproxy@1.9.0-2~bpo8%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.9.0-2~bpo8%252B1
1
url pkg:deb/debian/mapproxy@1.9.0-3%2Bdeb9u1
purl pkg:deb/debian/mapproxy@1.9.0-3%2Bdeb9u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/mapproxy@1.9.0-3%252Bdeb9u1
2
url pkg:pypi/mapproxy@0.8.0
purl pkg:pypi/mapproxy@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.0
3
url pkg:pypi/mapproxy@0.8.0.dev-20100310
purl pkg:pypi/mapproxy@0.8.0.dev-20100310
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.0.dev-20100310
4
url pkg:pypi/mapproxy@0.8.0.dev-20100311
purl pkg:pypi/mapproxy@0.8.0.dev-20100311
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.0.dev-20100311
5
url pkg:pypi/mapproxy@0.8.0.dev-20100315
purl pkg:pypi/mapproxy@0.8.0.dev-20100315
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.0.dev-20100315
6
url pkg:pypi/mapproxy@0.8.0.dev-20100322
purl pkg:pypi/mapproxy@0.8.0.dev-20100322
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.0.dev-20100322
7
url pkg:pypi/mapproxy@0.8.1
purl pkg:pypi/mapproxy@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.1
8
url pkg:pypi/mapproxy@0.8.2
purl pkg:pypi/mapproxy@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.2
9
url pkg:pypi/mapproxy@0.8.3
purl pkg:pypi/mapproxy@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.3
10
url pkg:pypi/mapproxy@0.8.4
purl pkg:pypi/mapproxy@0.8.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.4
11
url pkg:pypi/mapproxy@0.8.4.1
purl pkg:pypi/mapproxy@0.8.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.4.1
12
url pkg:pypi/mapproxy@0.8.5
purl pkg:pypi/mapproxy@0.8.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.8.5
13
url pkg:pypi/mapproxy@0.9.0
purl pkg:pypi/mapproxy@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.9.0
14
url pkg:pypi/mapproxy@0.9.0.1
purl pkg:pypi/mapproxy@0.9.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.9.0.1
15
url pkg:pypi/mapproxy@0.9.1
purl pkg:pypi/mapproxy@0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@0.9.1
16
url pkg:pypi/mapproxy@1.0.0
purl pkg:pypi/mapproxy@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.0.0
17
url pkg:pypi/mapproxy@1.0.1
purl pkg:pypi/mapproxy@1.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.0.1
18
url pkg:pypi/mapproxy@1.1.0
purl pkg:pypi/mapproxy@1.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.1.0
19
url pkg:pypi/mapproxy@1.10.0
purl pkg:pypi/mapproxy@1.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.10.0
20
url pkg:pypi/mapproxy@1.10.1
purl pkg:pypi/mapproxy@1.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.10.1
21
url pkg:pypi/mapproxy@1.10.2
purl pkg:pypi/mapproxy@1.10.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.10.2
22
url pkg:pypi/mapproxy@1.1.1
purl pkg:pypi/mapproxy@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.1.1
23
url pkg:pypi/mapproxy@1.1.2
purl pkg:pypi/mapproxy@1.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.1.2
24
url pkg:pypi/mapproxy@1.2.0
purl pkg:pypi/mapproxy@1.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.2.0
25
url pkg:pypi/mapproxy@1.2.1
purl pkg:pypi/mapproxy@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.2.1
26
url pkg:pypi/mapproxy@1.3.0
purl pkg:pypi/mapproxy@1.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.3.0
27
url pkg:pypi/mapproxy@1.4.0
purl pkg:pypi/mapproxy@1.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.4.0
28
url pkg:pypi/mapproxy@1.5.0
purl pkg:pypi/mapproxy@1.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.5.0
29
url pkg:pypi/mapproxy@1.6.0
purl pkg:pypi/mapproxy@1.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.6.0
30
url pkg:pypi/mapproxy@1.7.0
purl pkg:pypi/mapproxy@1.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.7.0
31
url pkg:pypi/mapproxy@1.7.1
purl pkg:pypi/mapproxy@1.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.7.1
32
url pkg:pypi/mapproxy@1.8.0
purl pkg:pypi/mapproxy@1.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.8.0
33
url pkg:pypi/mapproxy@1.8.1
purl pkg:pypi/mapproxy@1.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.8.1
34
url pkg:pypi/mapproxy@1.8.2
purl pkg:pypi/mapproxy@1.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.8.2
35
url pkg:pypi/mapproxy@1.9.0
purl pkg:pypi/mapproxy@1.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.9.0
36
url pkg:pypi/mapproxy@1.9.1
purl pkg:pypi/mapproxy@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.9.1
37
url pkg:pypi/mapproxy@1.10.3
purl pkg:pypi/mapproxy@1.10.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-eeee-eupn-z7bb
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mapproxy@1.10.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1000426
reference_id
reference_type
scores
0
value 0.00229
scoring_system epss
scoring_elements 0.45857
published_at 2026-06-05T12:55:00Z
1
value 0.00229
scoring_system epss
scoring_elements 0.45788
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1000426
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000426
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000426
2
reference_url https://github.com/mapproxy/mapproxy
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mapproxy/mapproxy
3
reference_url https://github.com/mapproxy/mapproxy/commit/420412aad45171e05752007a0a2350c03c28dfd8
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mapproxy/mapproxy/commit/420412aad45171e05752007a0a2350c03c28dfd8
4
reference_url https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mapproxy/mapproxy/commit/436c8f489761d1b4ee22b2440b53cc96bbc28aea
5
reference_url https://github.com/mapproxy/mapproxy/issues/322
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/mapproxy/mapproxy/issues/322
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-1000426
reference_id CVE-2017-1000426
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-1000426
7
reference_url https://github.com/advisories/GHSA-g4rw-82hq-8jpr
reference_id GHSA-g4rw-82hq-8jpr
reference_type
scores
url https://github.com/advisories/GHSA-g4rw-82hq-8jpr
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-eeee-eupn-z7bb