Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-f837-rs5d-jbbp
Summary
Authentication Bypass in TYPO3 Frontend
Due to late TCA initialization the authentication service fails to restrict frontend user according to the validation rules. Therefore it is possible to authenticate restricted (e.g. disabled) frontend users.
Aliases
0
alias GHSA-mh3r-6cp5-hc2j
Fixed_packages
0
url pkg:composer/typo3/cms@8.6.1
purl pkg:composer/typo3/cms@8.6.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-3ugj-6m1e-e3hr
2
vulnerability VCID-4eym-e6vt-8fbs
3
vulnerability VCID-7ch1-q9f4-a7bt
4
vulnerability VCID-7m6u-k5tp-gkhy
5
vulnerability VCID-848u-w88s-5bbe
6
vulnerability VCID-953t-q1cr-zyd6
7
vulnerability VCID-9saf-w56y-pugz
8
vulnerability VCID-abjx-8v46-d7d8
9
vulnerability VCID-am6s-67bm-77dr
10
vulnerability VCID-bn3p-39sv-6fdg
11
vulnerability VCID-dsqm-9q3e-dudw
12
vulnerability VCID-e564-zdku-9fc6
13
vulnerability VCID-emqq-kwjg-3kfk
14
vulnerability VCID-ev4k-5k1d-2bhu
15
vulnerability VCID-fdnw-2tz5-4fdr
16
vulnerability VCID-fqkx-v8t5-q3h6
17
vulnerability VCID-fut7-bb1f-37g7
18
vulnerability VCID-h7cg-64er-uya9
19
vulnerability VCID-hp99-ncuh-6ugv
20
vulnerability VCID-je4q-svfw-hqda
21
vulnerability VCID-jp1p-rfxa-hyd9
22
vulnerability VCID-jq5y-7h9g-mufa
23
vulnerability VCID-jqe4-8hzb-mfea
24
vulnerability VCID-k5t3-28es-h3ez
25
vulnerability VCID-khpm-e1xb-hydb
26
vulnerability VCID-mctp-nf36-7qdn
27
vulnerability VCID-njsj-bwjq-fyap
28
vulnerability VCID-nney-azbc-pucg
29
vulnerability VCID-p7gd-anw2-1qbz
30
vulnerability VCID-pmvp-twk2-jqe4
31
vulnerability VCID-q52p-xfj8-gygd
32
vulnerability VCID-qv14-m93d-jyd9
33
vulnerability VCID-qxab-9uwr-yqhv
34
vulnerability VCID-rqrw-t2kj-mud8
35
vulnerability VCID-ru6w-m6q6-27gn
36
vulnerability VCID-sdsa-mh76-kqch
37
vulnerability VCID-sy7r-d6pv-yba9
38
vulnerability VCID-u259-2sxq-tbct
39
vulnerability VCID-vq15-t92r-5bhx
40
vulnerability VCID-vw2r-g8yy-eyf4
41
vulnerability VCID-w1wb-mq2y-dfca
42
vulnerability VCID-wy45-2gmr-fkfg
43
vulnerability VCID-x5x1-w7yv-eye9
44
vulnerability VCID-xw1s-93bu-wuh9
45
vulnerability VCID-y7ds-p5r2-yuhq
46
vulnerability VCID-ygw4-jdqu-4fbt
47
vulnerability VCID-yz6t-ge1y-qfgr
48
vulnerability VCID-zmwv-gwq3-fkej
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.6.1
Affected_packages
0
url pkg:composer/typo3/cms@8.2.0
purl pkg:composer/typo3/cms@8.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffs-9vj5-27hk
1
vulnerability VCID-2vpx-fqb6-aqfa
2
vulnerability VCID-3ugj-6m1e-e3hr
3
vulnerability VCID-4eym-e6vt-8fbs
4
vulnerability VCID-5dxs-cdht-27hw
5
vulnerability VCID-5hm4-ms5p-uuae
6
vulnerability VCID-66ru-n2df-b3ay
7
vulnerability VCID-727q-h3ey-6yc9
8
vulnerability VCID-7ch1-q9f4-a7bt
9
vulnerability VCID-7m6u-k5tp-gkhy
10
vulnerability VCID-848u-w88s-5bbe
11
vulnerability VCID-8jcy-3kje-fqeh
12
vulnerability VCID-953t-q1cr-zyd6
13
vulnerability VCID-9saf-w56y-pugz
14
vulnerability VCID-abjx-8v46-d7d8
15
vulnerability VCID-am6s-67bm-77dr
16
vulnerability VCID-bn3p-39sv-6fdg
17
vulnerability VCID-d6c2-upx1-e7cd
18
vulnerability VCID-dsqm-9q3e-dudw
19
vulnerability VCID-e564-zdku-9fc6
20
vulnerability VCID-emqq-kwjg-3kfk
21
vulnerability VCID-eutz-mj58-audb
22
vulnerability VCID-ev4k-5k1d-2bhu
23
vulnerability VCID-f837-rs5d-jbbp
24
vulnerability VCID-fdnw-2tz5-4fdr
25
vulnerability VCID-fqkx-v8t5-q3h6
26
vulnerability VCID-fut7-bb1f-37g7
27
vulnerability VCID-gk79-jtuz-myh6
28
vulnerability VCID-h217-xe8x-nua3
29
vulnerability VCID-h7cg-64er-uya9
30
vulnerability VCID-h7hf-sf2q-73ay
31
vulnerability VCID-hg2n-xera-jkdh
32
vulnerability VCID-hp99-ncuh-6ugv
33
vulnerability VCID-hzma-cduk-3uhp
34
vulnerability VCID-jeqr-9tfu-f7b2
35
vulnerability VCID-jp1p-rfxa-hyd9
36
vulnerability VCID-jq5y-7h9g-mufa
37
vulnerability VCID-jqe4-8hzb-mfea
38
vulnerability VCID-k5t3-28es-h3ez
39
vulnerability VCID-khpm-e1xb-hydb
40
vulnerability VCID-ks1q-a8x2-uqht
41
vulnerability VCID-m3nc-xbb4-yubr
42
vulnerability VCID-mctp-nf36-7qdn
43
vulnerability VCID-njsj-bwjq-fyap
44
vulnerability VCID-nney-azbc-pucg
45
vulnerability VCID-p7gd-anw2-1qbz
46
vulnerability VCID-pmvp-twk2-jqe4
47
vulnerability VCID-q52p-xfj8-gygd
48
vulnerability VCID-qxab-9uwr-yqhv
49
vulnerability VCID-rqrw-t2kj-mud8
50
vulnerability VCID-ru6w-m6q6-27gn
51
vulnerability VCID-sdsa-mh76-kqch
52
vulnerability VCID-sy7r-d6pv-yba9
53
vulnerability VCID-u259-2sxq-tbct
54
vulnerability VCID-vq15-t92r-5bhx
55
vulnerability VCID-vw2r-g8yy-eyf4
56
vulnerability VCID-wy45-2gmr-fkfg
57
vulnerability VCID-x5x1-w7yv-eye9
58
vulnerability VCID-xh68-defe-f7ce
59
vulnerability VCID-xw1s-93bu-wuh9
60
vulnerability VCID-y7ds-p5r2-yuhq
61
vulnerability VCID-ygw4-jdqu-4fbt
62
vulnerability VCID-yn6z-9v7k-x7br
63
vulnerability VCID-yz6t-ge1y-qfgr
64
vulnerability VCID-zmwv-gwq3-fkej
65
vulnerability VCID-zrz3-3dnf-tbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/typo3/cms@8.2.0
References
0
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-02-28-1.yaml
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2017-02-28-1.yaml
1
reference_url https://github.com/advisories/GHSA-mh3r-6cp5-hc2j
reference_id GHSA-mh3r-6cp5-hc2j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mh3r-6cp5-hc2j
Weaknesses
0
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-f837-rs5d-jbbp