EUVD-2022-1868

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

http-swagger versions prior to 1.2.6 vulnerable to denial of service, upgrade or restrict to GET method.

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2022-24863	18 Apr 202222:24	–	circl
CNNVD	http-swagger 安全漏洞	18 Apr 202200:00	–	cnnvd
CVE	CVE-2022-24863	18 Apr 202219:00	–	cve
Cvelist	CVE-2022-24863 Denial of service in http-swagger	18 Apr 202219:00	–	cvelist
Github Security Blog	Denial of Service in http-swagger	22 Apr 202220:55	–	github
NVD	CVE-2022-24863	18 Apr 202219:15	–	nvd
OSV	CVE-2022-24863 Denial of service in http-swagger	18 Apr 202219:00	–	osv
OSV	CVE-2024-25712	29 Feb 202401:44	–	osv
OSV	GHSA-49W7-5R33-JM9M http-swagger XSS via PUT requests	29 Feb 202403:33	–	osv
OSV	GHSA-XG75-Q3Q5-CQMV Denial of Service in http-swagger	22 Apr 202220:55	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "a6153e91-46aa-34ca-b1f9-bf115cd21d4e",
        "vendor": {
          "name": "swaggo"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ac2c0a09-47ad-384c-be04-556e56c9b291",
        "product": {
          "name": "http-swagger"
        },
        "product_version": "< 1.2.6"
      }
    ]
  }
]

Source	Link
github	www.github.com/swaggo/http-swagger/security/advisories/GHSA-xg75-q3q5-cqmv
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24863
github	www.github.com/swaggo/http-swagger/pull/62
github	www.github.com/swaggo/http-swagger/commit/b7d83e8fba85a7a51aa7e45e8244b4173f15049e
cosmosofcyberspace	www.cosmosofcyberspace.github.io/improper_http_method_leads_to_xss/poc.html
github	www.github.com/swaggo/http-swagger
github	www.github.com/swaggo/http-swagger/releases/tag/v1.2.6

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

CVSS 27.8

EPSS0.00239

SSVC