Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2023-38337
HistoryJul 14, 2023 - 12:00 a.m.

CVE-2023-38337

2023-07-1400:00:00
mitre
www.cve.org
2
rswag
directory traversal
vulnerability
json
yaml
openapi
swagger

EPSS

0.002

Percentile

57.5%

JSON

rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.

Related

veracode 1
rubygems 1
osv 2
prion 1
github 1
cve 1
nvd 1
veracode
veracode
Directory Traversal
2023-07-18 22:51:27
rubygems
rubygems
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
2023-07-14 21:00:00
osv
osv
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
2023-07-15 00:30:34
CVE-2023-38337
2023-07-14 22:15:09
prion
prion
Directory traversal
2023-07-14 22:15:00
github
github
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
2023-07-15 00:30:34
cve
cve
CVE-2023-38337
2023-07-14 22:15:09
nvd
nvd
CVE-2023-38337
2023-07-14 22:15:09

EPSS

0.002

Percentile

57.5%

JSON
Related for CVELIST:CVE-2023-38337
veracode1rubygems1osv2prion1github1cve1nvd1