Lucene search

GitHub Advisory DatabaseGHSA-62JR-84GF-WMG4

HistoryJan 16, 2024 - 3:24 p.m.

Default swagger-ui configuration exposes all files in the module

2024-01-1615:24:41

CWE-1188

GitHub Advisory Database

github.com

swagger-ui

module files

http routes

fastify

basedir option

hackerone report

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

JSON

Impact

The default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module’s directory being exposed via http routes served by the module.

Patches

Update to v2.1.0

Workarounds

Use the baseDir option

References

HackerOne report
.

Affected configurations

Vulners

Node

fastifyfastify-multipartRange<2.1.0fastify

CPENameOperatorVersion
@fastify/swagger-uilt2.1.0

CPE	Name	Operator	Version
	@fastify/swagger-ui	lt	2.1.0

References

github.com/advisories/GHSA-62jr-84gf-wmg4

github.com/fastify/fastify-swagger-ui/commit/13d799a2c5f14d3dd5b15892e03bbcbae63ee6f7

github.com/fastify/fastify-swagger-ui/security/advisories/GHSA-62jr-84gf-wmg4

nvd.nist.gov/vuln/detail/CVE-2024-22207

security.netapp.com/advisory/ntap-20240216-0002

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

JSON

Related for GHSA-62JR-84GF-WMG4