Lucene search

CVE-2019-17495

🗓️ 10 Oct 2019 21:49:04Reported by mitreType

A CSS injection vulnerability in Swagger UI allows attackers to exfiltrate input field values including CSRF token value through the Relative Path Overwrite (RPO) technique

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ InstaScan (CVE-2019-17495)	10 Jul 202014:19	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)	20 Jan 202018:11	–	ibm
IBM Security Bulletins	Security Bulletin: Automation Assets in IBM Cloud Pak for Integration is vulnerable to CSS injection due to Swagger CVE-2019-17495	31 Jan 202310:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2019-17495)	14 Sep 202215:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to an IBM WebSphere Application Server Liberty vulnerability (CVE-2019-17495)	10 May 202017:38	–	ibm
IBM Security Bulletins	Security Bulletin: Novalink is impacted by Swagger vulnerability affects WebSphere Application Server Liberty	27 Jul 202019:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ (CVE-2019-17495)	11 Jul 202013:19	–	ibm
IBM Security Bulletins	Security Bulletin: Swagger Vulnerability in WebSphere Application Server Liberty shipped with Cloud Pak System (CVE-2019-17495)	7 Jul 202013:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is affected by a vulnerability in WebSphere Application Server Liberty (CVE-2019-17495)	19 Mar 202019:26	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private - Swagger UI (CVE-2019-17495)	30 Dec 201916:34	–	ibm

Source	Link
lists	www.lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f%40%3Ccommits.airflow.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujul2022.html
oracle	www.oracle.com/security-alerts/cpuApr2021.html
github	www.github.com/swagger-api/swagger-ui/releases/tag/v3.23.11
lists	www.lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f%40%3Ccommits.airflow.apache.org%3E
oracle	www.oracle.com/security-alerts/cpujan2022.html
lists	www.lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf%40%3Ccommits.airflow.apache.org%3E
lists	www.lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91%40%3Ccommits.airflow.apache.org%3E
github	www.github.com/tarantula-team/CSS-injection-in-Swagger-UI

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Oct 2019 21:04Current

9.4High risk

Vulners AI Score9.4

EPSS0.022