Xunfeng Project Xunfeng 0.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:xunfeng_project:xunfeng:0.2.0:*:*:*:*:*:*:*part: a version: 0.2.0 update: *
| Vendor | Xunfeng Project (979b94bc-4741-54eb-a327-bad75cec3f1d) |
|---|---|
| Product | Xunfeng (b06adf9d-44df-5387-9fe9-c152e930839d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/ysrc/xunfeng |
purl2cpe | 2026-06-01 10:17:00.248429 |
pkg:github/ysrc/xunfeng |
purl2cpe | 2026-06-01 10:17:00.248431 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-16951 |
vulnerable | 2026-06-08 05:11:05.780731 |
Details available
xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to CVE-2018-16832.
Published: 2018-09-12T01:00:00.000Z
Updated: 2024-08-05T10:39:57.960Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16832 |
vulnerable | 2026-06-08 05:11:05.531123 |
Details available
CSRF in the anti-csrf decorator in xunfeng 0.2.0 allows an attacker to modify the configuration via a Flash file because views/lib/AntiCSRF.py can overwrite the request.host value with the content of the X-Forwarded-Host HTTP header.
Published: 2018-09-11T13:00:00.000Z
Updated: 2024-08-05T10:32:54.009Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.