Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-jn2s-p2jn-efgn

Summary

Incorrect Comparison
Attacker can access arbitrary recording/room

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.0.0 before 7.1.0

Aliases

alias	CVE-2023-28936

alias	GHSA-v93h-rwj8-78qh

Fixed_packages

url	pkg:maven/org.apache.openmeetings/openmeetings-db@7.1.0
purl	pkg:maven/org.apache.openmeetings/openmeetings-db@7.1.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.openmeetings/openmeetings-db@7.1.0

url	pkg:maven/org.apache.openmeetings/openmeetings-server@7.1.0
purl	pkg:maven/org.apache.openmeetings/openmeetings-server@7.1.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.openmeetings/openmeetings-server@7.1.0

Affected_packages

url pkg:maven/org.apache.openmeetings/openmeetings-db@2.0.0

purl pkg:maven/org.apache.openmeetings/openmeetings-db@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-jn2s-p2jn-efgn

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.openmeetings/openmeetings-db@2.0.0

url pkg:maven/org.apache.openmeetings/openmeetings-server@2.0.0

purl pkg:maven/org.apache.openmeetings/openmeetings-server@2.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-556q-4wch-sfde

vulnerability	VCID-jn2s-p2jn-efgn

resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.openmeetings/openmeetings-server@2.0.0

References

reference_url	https://github.com/apache/openmeetings/commit/a28dea888fca1c5c3e0ce4c8a4c62f501aebe0cd
reference_id
reference_type
scores
url	https://github.com/apache/openmeetings/commit/a28dea888fca1c5c3e0ce4c8a4c62f501aebe0cd

reference_url	https://issues.apache.org/jira/browse/OPENMEETINGS-2762
reference_id
reference_type
scores
url	https://issues.apache.org/jira/browse/OPENMEETINGS-2762

reference_url	https://lists.apache.org/thread/y6vng44c22ll221rtvsv208x1pbjmdoc
reference_id
reference_type
scores
url	https://lists.apache.org/thread/y6vng44c22ll221rtvsv208x1pbjmdoc

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2023-28936
reference_id	CVE-2023-28936
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2023-28936

reference_url	https://github.com/advisories/GHSA-v93h-rwj8-78qh
reference_id	GHSA-v93h-rwj8-78qh
reference_type
scores
url	https://github.com/advisories/GHSA-v93h-rwj8-78qh

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	697
name	Incorrect Comparison
description	The product compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jn2s-p2jn-efgn

Vulnerability Instance