Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-mde9-c1xs-bucm
Summarydotnet: Elevation of privilege - TarFile.ExtractToDirectory ignores extraction directory argument
Aliases
0
alias CVE-2023-32032
Fixed_packages
0
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armv7&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armv7&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=armv7&distroversion=v3.19&reponame=community
1
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=x86&distroversion=v3.19&reponame=community
2
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=ppc64le&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=ppc64le&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community
3
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=s390x&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=s390x&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=s390x&distroversion=v3.18&reponame=community
4
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=aarch64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=aarch64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=aarch64&distroversion=v3.19&reponame=community
5
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=s390x&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=s390x&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=s390x&distroversion=v3.19&reponame=community
6
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86_64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86_64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=x86_64&distroversion=v3.19&reponame=community
7
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armv7&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armv7&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=armv7&distroversion=v3.18&reponame=community
8
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=aarch64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=aarch64&distroversion=v3.18&reponame=community
9
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armhf&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armhf&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=armhf&distroversion=v3.18&reponame=community
10
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armhf&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=armhf&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=armhf&distroversion=v3.19&reponame=community
11
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=ppc64le&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=ppc64le&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=ppc64le&distroversion=v3.19&reponame=community
12
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=x86&distroversion=v3.18&reponame=community
13
url pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86_64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-build@7.0.107-r0?arch=x86_64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-build@7.0.107-r0%3Farch=x86_64&distroversion=v3.18&reponame=community
14
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=aarch64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=aarch64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=aarch64&distroversion=v3.19&reponame=community
15
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=ppc64le&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=ppc64le&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=ppc64le&distroversion=v3.19&reponame=community
16
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=s390x&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=s390x&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=s390x&distroversion=v3.19&reponame=community
17
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=x86&distroversion=v3.19&reponame=community
18
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=x86&distroversion=v3.18&reponame=community
19
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armhf&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armhf&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=armhf&distroversion=v3.19&reponame=community
20
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armv7&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armv7&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=armv7&distroversion=v3.19&reponame=community
21
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=aarch64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=aarch64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=aarch64&distroversion=v3.18&reponame=community
22
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armhf&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armhf&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=armhf&distroversion=v3.18&reponame=community
23
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=ppc64le&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=ppc64le&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=ppc64le&distroversion=v3.18&reponame=community
24
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=s390x&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=s390x&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=s390x&distroversion=v3.18&reponame=community
25
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86_64&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86_64&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=x86_64&distroversion=v3.18&reponame=community
26
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armv7&distroversion=v3.18&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=armv7&distroversion=v3.18&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=armv7&distroversion=v3.18&reponame=community
27
url pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86_64&distroversion=v3.19&reponame=community
purl pkg:apk/alpine/dotnet7-runtime@7.0.7-r0?arch=x86_64&distroversion=v3.19&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/dotnet7-runtime@7.0.7-r0%3Farch=x86_64&distroversion=v3.19&reponame=community
Affected_packages
0
url pkg:rpm/redhat/dotnet7.0@7.0.107-1?arch=el9_2
purl pkg:rpm/redhat/dotnet7.0@7.0.107-1?arch=el9_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhk-pky7-kkh2
1
vulnerability VCID-fjrz-p8rx-5qgq
2
vulnerability VCID-mde9-c1xs-bucm
3
vulnerability VCID-sv3w-aygm-pyh8
4
vulnerability VCID-yp6p-q3tf-5qb7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/dotnet7.0@7.0.107-1%3Farch=el9_2
1
url pkg:rpm/redhat/dotnet7.0@7.0.107-1?arch=el8_8
purl pkg:rpm/redhat/dotnet7.0@7.0.107-1?arch=el8_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jhk-pky7-kkh2
1
vulnerability VCID-fjrz-p8rx-5qgq
2
vulnerability VCID-mde9-c1xs-bucm
3
vulnerability VCID-sv3w-aygm-pyh8
4
vulnerability VCID-yp6p-q3tf-5qb7
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/dotnet7.0@7.0.107-1%3Farch=el8_8
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-32032.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-32032.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-32032
reference_id
reference_type
scores
0
value 0.00155
scoring_system epss
scoring_elements 0.36261
published_at 2026-04-07T12:55:00Z
1
value 0.00155
scoring_system epss
scoring_elements 0.36392
published_at 2026-04-02T12:55:00Z
2
value 0.00155
scoring_system epss
scoring_elements 0.36309
published_at 2026-04-08T12:55:00Z
3
value 0.00155
scoring_system epss
scoring_elements 0.36425
published_at 2026-04-04T12:55:00Z
4
value 0.00166
scoring_system epss
scoring_elements 0.37207
published_at 2026-05-14T12:55:00Z
5
value 0.00166
scoring_system epss
scoring_elements 0.37158
published_at 2026-05-11T12:55:00Z
6
value 0.00166
scoring_system epss
scoring_elements 0.37129
published_at 2026-05-12T12:55:00Z
7
value 0.00166
scoring_system epss
scoring_elements 0.37696
published_at 2026-04-09T12:55:00Z
8
value 0.00166
scoring_system epss
scoring_elements 0.3771
published_at 2026-04-11T12:55:00Z
9
value 0.00166
scoring_system epss
scoring_elements 0.37675
published_at 2026-04-12T12:55:00Z
10
value 0.00166
scoring_system epss
scoring_elements 0.37647
published_at 2026-04-13T12:55:00Z
11
value 0.00166
scoring_system epss
scoring_elements 0.37694
published_at 2026-04-16T12:55:00Z
12
value 0.00166
scoring_system epss
scoring_elements 0.37676
published_at 2026-04-18T12:55:00Z
13
value 0.00166
scoring_system epss
scoring_elements 0.37614
published_at 2026-04-21T12:55:00Z
14
value 0.00166
scoring_system epss
scoring_elements 0.37377
published_at 2026-04-24T12:55:00Z
15
value 0.00166
scoring_system epss
scoring_elements 0.37357
published_at 2026-04-26T12:55:00Z
16
value 0.00166
scoring_system epss
scoring_elements 0.37269
published_at 2026-04-29T12:55:00Z
17
value 0.00166
scoring_system epss
scoring_elements 0.37151
published_at 2026-05-05T12:55:00Z
18
value 0.00166
scoring_system epss
scoring_elements 0.37219
published_at 2026-05-07T12:55:00Z
19
value 0.00166
scoring_system epss
scoring_elements 0.37238
published_at 2026-05-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-32032
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2212615
reference_id 2212615
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2212615
3
reference_url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032
reference_id CVE-2023-32032
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H/E:P/RL:O/RC:C
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-22T20:01:37Z/
url https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-32032
4
reference_url https://access.redhat.com/errata/RHSA-2023:3592
reference_id RHSA-2023:3592
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3592
5
reference_url https://access.redhat.com/errata/RHSA-2023:3593
reference_id RHSA-2023:3593
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3593
6
reference_url https://usn.ubuntu.com/6161-1/
reference_id USN-6161-1
reference_type
scores
url https://usn.ubuntu.com/6161-1/
Weaknesses
0
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
Severity_range_score6.5 - 6.5
Exploitability0.5
Weighted_severity5.9
Risk_score3.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-mde9-c1xs-bucm