Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mup7-wezz-gkgc
SummaryWhen receiving an HTML email that contained an iframe element, which used a srcdoc attribute to define the inner HTML document, remote objects specified in the nested document, for example images or videos, were not blocked. Rather, the network was accessed, the objects were loaded and displayed.
Aliases
0
alias CVE-2022-3032
Fixed_packages
0
url pkg:deb/debian/thunderbird@0?distro=trixie
purl pkg:deb/debian/thunderbird@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@0%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.1-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.1-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fqb-r5zb-a7dp
1
vulnerability VCID-3a6f-173h-fqbz
2
vulnerability VCID-3kv6-c148-nkhq
3
vulnerability VCID-4e49-6tg2-e7d9
4
vulnerability VCID-59d3-343b-e3aw
5
vulnerability VCID-61r1-arbe-dke4
6
vulnerability VCID-7jt2-zr49-7ye5
7
vulnerability VCID-95et-ezmb-buau
8
vulnerability VCID-9nbw-7c9e-13af
9
vulnerability VCID-av7u-3g4m-mugm
10
vulnerability VCID-bwth-uepr-z7a3
11
vulnerability VCID-cjsm-7gxr-8ygw
12
vulnerability VCID-d16s-p141-qbft
13
vulnerability VCID-fxjm-ywug-f3d5
14
vulnerability VCID-hk2m-rbdy-nqhc
15
vulnerability VCID-ma29-qa7e-9qb4
16
vulnerability VCID-nge1-4cvg-zqb2
17
vulnerability VCID-nyum-jpbc-abew
18
vulnerability VCID-p6yz-xs58-u3gm
19
vulnerability VCID-pfmd-zv8f-8bfc
20
vulnerability VCID-pszh-x9gd-xyg4
21
vulnerability VCID-q689-wneh-hbdq
22
vulnerability VCID-q8qp-5szp-mfe8
23
vulnerability VCID-ruqn-mk9t-57hb
24
vulnerability VCID-tv7r-qf2c-dqbm
25
vulnerability VCID-ufku-v5vq-4yef
26
vulnerability VCID-w98r-yagc-kkec
27
vulnerability VCID-z6tm-b352-5uhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3a6f-173h-fqbz
1
vulnerability VCID-4e49-6tg2-e7d9
2
vulnerability VCID-pszh-x9gd-xyg4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.6.0esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3a6f-173h-fqbz
1
vulnerability VCID-4e49-6tg2-e7d9
2
vulnerability VCID-pszh-x9gd-xyg4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.8.0esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.0esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5dw5-vpt8-zqbz
1
vulnerability VCID-9ag7-z86d-nba9
2
vulnerability VCID-qbzp-euvv-q7c7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.0esr-1%3Fdistro=trixie
6
url pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.9.1esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2fqb-r5zb-a7dp
1
vulnerability VCID-3kv6-c148-nkhq
2
vulnerability VCID-59d3-343b-e3aw
3
vulnerability VCID-61r1-arbe-dke4
4
vulnerability VCID-7jt2-zr49-7ye5
5
vulnerability VCID-95et-ezmb-buau
6
vulnerability VCID-9nbw-7c9e-13af
7
vulnerability VCID-av7u-3g4m-mugm
8
vulnerability VCID-bwth-uepr-z7a3
9
vulnerability VCID-cjsm-7gxr-8ygw
10
vulnerability VCID-d16s-p141-qbft
11
vulnerability VCID-fxjm-ywug-f3d5
12
vulnerability VCID-hk2m-rbdy-nqhc
13
vulnerability VCID-ma29-qa7e-9qb4
14
vulnerability VCID-nge1-4cvg-zqb2
15
vulnerability VCID-nyum-jpbc-abew
16
vulnerability VCID-p6yz-xs58-u3gm
17
vulnerability VCID-pfmd-zv8f-8bfc
18
vulnerability VCID-q689-wneh-hbdq
19
vulnerability VCID-q8qp-5szp-mfe8
20
vulnerability VCID-ruqn-mk9t-57hb
21
vulnerability VCID-tv7r-qf2c-dqbm
22
vulnerability VCID-w98r-yagc-kkec
23
vulnerability VCID-z6tm-b352-5uhk
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.9.1esr-1%3Fdistro=trixie
7
url pkg:deb/debian/thunderbird@1:140.10.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.0esr-1%3Fdistro=trixie
8
url pkg:deb/debian/thunderbird@1:140.10.1esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3a6f-173h-fqbz
1
vulnerability VCID-4e49-6tg2-e7d9
2
vulnerability VCID-pszh-x9gd-xyg4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1%3Fdistro=trixie
9
url pkg:deb/debian/thunderbird@1:140.10.2esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.2esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.2esr-1%3Fdistro=trixie
Affected_packages
0
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_1
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el8_1
1
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el9_0
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el9_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el9_0
2
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_4
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el8_4
3
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_6
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el8_6
4
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_2
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el8_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el8_2
5
url pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el7_9
purl pkg:rpm/redhat/thunderbird@102.3.0-3?arch=el7_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-135c-h34e-tye5
1
vulnerability VCID-1jvh-anus-rfeg
2
vulnerability VCID-4m2d-td6c-ukd4
3
vulnerability VCID-6dgw-qbue-nqax
4
vulnerability VCID-bxrh-7kwf-p3at
5
vulnerability VCID-c5b5-beuj-z3gh
6
vulnerability VCID-cw2e-p5x2-j7fu
7
vulnerability VCID-kf1h-zg32-1yh4
8
vulnerability VCID-mup7-wezz-gkgc
9
vulnerability VCID-qy44-ubss-x7et
10
vulnerability VCID-uvzd-dxhu-hydg
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/thunderbird@102.3.0-3%3Farch=el7_9
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3032.json
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-3032.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3032
reference_id
reference_type
scores
0
value 0.00407
scoring_system epss
scoring_elements 0.6127
published_at 2026-05-14T12:55:00Z
1
value 0.00407
scoring_system epss
scoring_elements 0.61168
published_at 2026-04-29T12:55:00Z
2
value 0.00407
scoring_system epss
scoring_elements 0.61116
published_at 2026-05-05T12:55:00Z
3
value 0.00407
scoring_system epss
scoring_elements 0.61165
published_at 2026-05-07T12:55:00Z
4
value 0.00407
scoring_system epss
scoring_elements 0.61225
published_at 2026-05-09T12:55:00Z
5
value 0.00407
scoring_system epss
scoring_elements 0.61186
published_at 2026-05-11T12:55:00Z
6
value 0.00407
scoring_system epss
scoring_elements 0.61213
published_at 2026-05-12T12:55:00Z
7
value 0.00407
scoring_system epss
scoring_elements 0.61097
published_at 2026-04-02T12:55:00Z
8
value 0.00407
scoring_system epss
scoring_elements 0.61125
published_at 2026-04-04T12:55:00Z
9
value 0.00407
scoring_system epss
scoring_elements 0.61091
published_at 2026-04-07T12:55:00Z
10
value 0.00407
scoring_system epss
scoring_elements 0.61139
published_at 2026-04-08T12:55:00Z
11
value 0.00407
scoring_system epss
scoring_elements 0.61155
published_at 2026-04-09T12:55:00Z
12
value 0.00407
scoring_system epss
scoring_elements 0.61175
published_at 2026-04-11T12:55:00Z
13
value 0.00407
scoring_system epss
scoring_elements 0.61162
published_at 2026-04-12T12:55:00Z
14
value 0.00407
scoring_system epss
scoring_elements 0.61143
published_at 2026-04-13T12:55:00Z
15
value 0.00407
scoring_system epss
scoring_elements 0.61183
published_at 2026-04-16T12:55:00Z
16
value 0.00407
scoring_system epss
scoring_elements 0.61189
published_at 2026-04-18T12:55:00Z
17
value 0.00407
scoring_system epss
scoring_elements 0.6117
published_at 2026-04-21T12:55:00Z
18
value 0.00407
scoring_system epss
scoring_elements 0.61159
published_at 2026-04-24T12:55:00Z
19
value 0.00407
scoring_system epss
scoring_elements 0.61174
published_at 2026-04-26T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3032
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2123255
reference_id 2123255
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2123255
4
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-38
reference_id mfsa2022-38
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-38
5
reference_url https://www.mozilla.org/security/advisories/mfsa2022-38/
reference_id mfsa2022-38
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-09T19:56:21Z/
url https://www.mozilla.org/security/advisories/mfsa2022-38/
6
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-39
reference_id mfsa2022-39
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-39
7
reference_url https://www.mozilla.org/security/advisories/mfsa2022-39/
reference_id mfsa2022-39
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-09T19:56:21Z/
url https://www.mozilla.org/security/advisories/mfsa2022-39/
8
reference_url https://access.redhat.com/errata/RHSA-2022:6708
reference_id RHSA-2022:6708
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6708
9
reference_url https://access.redhat.com/errata/RHSA-2022:6710
reference_id RHSA-2022:6710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6710
10
reference_url https://access.redhat.com/errata/RHSA-2022:6713
reference_id RHSA-2022:6713
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6713
11
reference_url https://access.redhat.com/errata/RHSA-2022:6715
reference_id RHSA-2022:6715
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6715
12
reference_url https://access.redhat.com/errata/RHSA-2022:6716
reference_id RHSA-2022:6716
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6716
13
reference_url https://access.redhat.com/errata/RHSA-2022:6717
reference_id RHSA-2022:6717
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6717
14
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1783831
reference_id show_bug.cgi?id=1783831
reference_type
scores
0
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-09T19:56:21Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1783831
15
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
Weaknesses
0
cwe_id 1021
name Improper Restriction of Rendered UI Layers or Frames
description The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.
Exploits
Severity_range_score6.1 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mup7-wezz-gkgc