CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17175

In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to expose no fields to instead expose all fields (if the schema is being filtered dynamically using the "only" option, and there is a user role that produces an empty value for "only").

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 17.8%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2018-17175

Marshmallow Project » Marshmallow » Version: 0.1.0

cpe:2.3:a:marshmallow_project:marshmallow:0.1.0
Marshmallow Project » Marshmallow » Version: 0.2.0

cpe:2.3:a:marshmallow_project:marshmallow:0.2.0
Marshmallow Project » Marshmallow » Version: 0.2.1

cpe:2.3:a:marshmallow_project:marshmallow:0.2.1
Marshmallow Project » Marshmallow » Version: 0.3.0

cpe:2.3:a:marshmallow_project:marshmallow:0.3.0
Marshmallow Project » Marshmallow » Version: 0.3.1

cpe:2.3:a:marshmallow_project:marshmallow:0.3.1
Marshmallow Project » Marshmallow » Version: 0.4.0

cpe:2.3:a:marshmallow_project:marshmallow:0.4.0
Marshmallow Project » Marshmallow » Version: 0.4.1

cpe:2.3:a:marshmallow_project:marshmallow:0.4.1
Marshmallow Project » Marshmallow » Version: 0.5.0

cpe:2.3:a:marshmallow_project:marshmallow:0.5.0
Marshmallow Project » Marshmallow » Version: 0.5.1

cpe:2.3:a:marshmallow_project:marshmallow:0.5.1
Marshmallow Project » Marshmallow » Version: 0.5.2

cpe:2.3:a:marshmallow_project:marshmallow:0.5.2
Marshmallow Project » Marshmallow » Version: 0.5.3

cpe:2.3:a:marshmallow_project:marshmallow:0.5.3
Marshmallow Project » Marshmallow » Version: 0.5.4

cpe:2.3:a:marshmallow_project:marshmallow:0.5.4
Marshmallow Project » Marshmallow » Version: 0.5.5

cpe:2.3:a:marshmallow_project:marshmallow:0.5.5
Marshmallow Project » Marshmallow » Version: 0.6.0

cpe:2.3:a:marshmallow_project:marshmallow:0.6.0
Marshmallow Project » Marshmallow » Version: 0.7.0

cpe:2.3:a:marshmallow_project:marshmallow:0.7.0
Marshmallow Project » Marshmallow » Version: 1.0.0

cpe:2.3:a:marshmallow_project:marshmallow:1.0.0
Marshmallow Project » Marshmallow » Version: 1.0.0-a

cpe:2.3:a:marshmallow_project:marshmallow:1.0.0-a
Marshmallow Project » Marshmallow » Version: 1.0.1

cpe:2.3:a:marshmallow_project:marshmallow:1.0.1
Marshmallow Project » Marshmallow » Version: 1.1.0

cpe:2.3:a:marshmallow_project:marshmallow:1.1.0
Marshmallow Project » Marshmallow » Version: 1.2.0

cpe:2.3:a:marshmallow_project:marshmallow:1.2.0
Marshmallow Project » Marshmallow » Version: 1.2.1

cpe:2.3:a:marshmallow_project:marshmallow:1.2.1
Marshmallow Project » Marshmallow » Version: 1.2.2

cpe:2.3:a:marshmallow_project:marshmallow:1.2.2
Marshmallow Project » Marshmallow » Version: 1.2.3

cpe:2.3:a:marshmallow_project:marshmallow:1.2.3
Marshmallow Project » Marshmallow » Version: 1.2.4

cpe:2.3:a:marshmallow_project:marshmallow:1.2.4
Marshmallow Project » Marshmallow » Version: 1.2.5

cpe:2.3:a:marshmallow_project:marshmallow:1.2.5
Marshmallow Project » Marshmallow » Version: 1.2.6

cpe:2.3:a:marshmallow_project:marshmallow:1.2.6
Marshmallow Project » Marshmallow » Version: 2.0.0

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0
Marshmallow Project » Marshmallow » Version: 2.0.0a1

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0a1
Marshmallow Project » Marshmallow » Version: 2.0.0b1

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0b1
Marshmallow Project » Marshmallow » Version: 2.0.0b2

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0b2
Marshmallow Project » Marshmallow » Version: 2.0.0b3

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0b3
Marshmallow Project » Marshmallow » Version: 2.0.0b4

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0b4
Marshmallow Project » Marshmallow » Version: 2.0.0b5

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0b5
Marshmallow Project » Marshmallow » Version: 2.0.0rc1

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0rc1
Marshmallow Project » Marshmallow » Version: 2.0.0rc2

cpe:2.3:a:marshmallow_project:marshmallow:2.0.0rc2
Marshmallow Project » Marshmallow » Version: 2.1.0

cpe:2.3:a:marshmallow_project:marshmallow:2.1.0
Marshmallow Project » Marshmallow » Version: 2.1.1

cpe:2.3:a:marshmallow_project:marshmallow:2.1.1
Marshmallow Project » Marshmallow » Version: 2.1.2

cpe:2.3:a:marshmallow_project:marshmallow:2.1.2
Marshmallow Project » Marshmallow » Version: 2.1.3

cpe:2.3:a:marshmallow_project:marshmallow:2.1.3
Marshmallow Project » Marshmallow » Version: 2.10.0

cpe:2.3:a:marshmallow_project:marshmallow:2.10.0
Marshmallow Project » Marshmallow » Version: 2.10.1

cpe:2.3:a:marshmallow_project:marshmallow:2.10.1
Marshmallow Project » Marshmallow » Version: 2.10.2

cpe:2.3:a:marshmallow_project:marshmallow:2.10.2
Marshmallow Project » Marshmallow » Version: 2.10.3

cpe:2.3:a:marshmallow_project:marshmallow:2.10.3
Marshmallow Project » Marshmallow » Version: 2.10.4

cpe:2.3:a:marshmallow_project:marshmallow:2.10.4
Marshmallow Project » Marshmallow » Version: 2.10.5

cpe:2.3:a:marshmallow_project:marshmallow:2.10.5
Marshmallow Project » Marshmallow » Version: 2.11.0

cpe:2.3:a:marshmallow_project:marshmallow:2.11.0
Marshmallow Project » Marshmallow » Version: 2.11.1

cpe:2.3:a:marshmallow_project:marshmallow:2.11.1
Marshmallow Project » Marshmallow » Version: 2.12.0

cpe:2.3:a:marshmallow_project:marshmallow:2.12.0
Marshmallow Project » Marshmallow » Version: 2.12.1

cpe:2.3:a:marshmallow_project:marshmallow:2.12.1
Marshmallow Project » Marshmallow » Version: 2.12.2

cpe:2.3:a:marshmallow_project:marshmallow:2.12.2
Marshmallow Project » Marshmallow » Version: 2.13.0

cpe:2.3:a:marshmallow_project:marshmallow:2.13.0
Marshmallow Project » Marshmallow » Version: 2.13.1

cpe:2.3:a:marshmallow_project:marshmallow:2.13.1
Marshmallow Project » Marshmallow » Version: 2.13.2

cpe:2.3:a:marshmallow_project:marshmallow:2.13.2
Marshmallow Project » Marshmallow » Version: 2.13.3

cpe:2.3:a:marshmallow_project:marshmallow:2.13.3
Marshmallow Project » Marshmallow » Version: 2.13.4

cpe:2.3:a:marshmallow_project:marshmallow:2.13.4
Marshmallow Project » Marshmallow » Version: 2.13.5

cpe:2.3:a:marshmallow_project:marshmallow:2.13.5
Marshmallow Project » Marshmallow » Version: 2.13.6

cpe:2.3:a:marshmallow_project:marshmallow:2.13.6
Marshmallow Project » Marshmallow » Version: 2.14.0

cpe:2.3:a:marshmallow_project:marshmallow:2.14.0
Marshmallow Project » Marshmallow » Version: 2.15.0

cpe:2.3:a:marshmallow_project:marshmallow:2.15.0
Marshmallow Project » Marshmallow » Version: 2.2.0

cpe:2.3:a:marshmallow_project:marshmallow:2.2.0
Marshmallow Project » Marshmallow » Version: 2.2.1

cpe:2.3:a:marshmallow_project:marshmallow:2.2.1
Marshmallow Project » Marshmallow » Version: 2.3.0

cpe:2.3:a:marshmallow_project:marshmallow:2.3.0
Marshmallow Project » Marshmallow » Version: 2.4.0

cpe:2.3:a:marshmallow_project:marshmallow:2.4.0
Marshmallow Project » Marshmallow » Version: 2.4.1

cpe:2.3:a:marshmallow_project:marshmallow:2.4.1
Marshmallow Project » Marshmallow » Version: 2.4.2

cpe:2.3:a:marshmallow_project:marshmallow:2.4.2
Marshmallow Project » Marshmallow » Version: 2.5.0

cpe:2.3:a:marshmallow_project:marshmallow:2.5.0
Marshmallow Project » Marshmallow » Version: 2.6.0

cpe:2.3:a:marshmallow_project:marshmallow:2.6.0
Marshmallow Project » Marshmallow » Version: 2.6.1

cpe:2.3:a:marshmallow_project:marshmallow:2.6.1
Marshmallow Project » Marshmallow » Version: 2.7.0

cpe:2.3:a:marshmallow_project:marshmallow:2.7.0
Marshmallow Project » Marshmallow » Version: 2.7.1

cpe:2.3:a:marshmallow_project:marshmallow:2.7.1
Marshmallow Project » Marshmallow » Version: 2.7.2

cpe:2.3:a:marshmallow_project:marshmallow:2.7.2
Marshmallow Project » Marshmallow » Version: 2.7.3

cpe:2.3:a:marshmallow_project:marshmallow:2.7.3
Marshmallow Project » Marshmallow » Version: 2.8.0

cpe:2.3:a:marshmallow_project:marshmallow:2.8.0
Marshmallow Project » Marshmallow » Version: 2.9.0

cpe:2.3:a:marshmallow_project:marshmallow:2.9.0
Marshmallow Project » Marshmallow » Version: 2.9.1

cpe:2.3:a:marshmallow_project:marshmallow:2.9.1
Marshmallow Project » Marshmallow » Version: 3.0.0a1

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0a1
Marshmallow Project » Marshmallow » Version: 3.0.0b1

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b1
Marshmallow Project » Marshmallow » Version: 3.0.0b2

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b2
Marshmallow Project » Marshmallow » Version: 3.0.0b3

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b3
Marshmallow Project » Marshmallow » Version: 3.0.0b4

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b4
Marshmallow Project » Marshmallow » Version: 3.0.0b5

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b5
Marshmallow Project » Marshmallow » Version: 3.0.0b6

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b6
Marshmallow Project » Marshmallow » Version: 3.0.0b7

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b7
Marshmallow Project » Marshmallow » Version: 3.0.0b8

cpe:2.3:a:marshmallow_project:marshmallow:3.0.0b8

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-17175

Products

Pricing

Contact Us