Lucene search

GoogleOSV:GHSA-G3HR-P86P-593H

HistoryMay 28, 2024 - 3:47 p.m.

OpenAPI Generator Online - Arbitrary File Read/Delete

2024-05-2815:47:57

Google

osv.dev

openapi generator

arbitrary file read

arbitrary file delete

vulnerability

fixed

v7.6.0

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Impact

Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the outputFolder option.

Patches

The issue was fixed via https://github.com/OpenAPITools/openapi-generator/pull/18652 (included in v7.6.0 release) by removing the usage of the outputFolder option.

Workarounds

No workaround available.

References

No other reference available.

CPENameOperatorVersion
org.openapitools:openapi-generator-onlineeq4.1.1
org.openapitools:openapi-generator-onlineeq4.2.2
org.openapitools:openapi-generator-onlineeq5.0.0-beta
org.openapitools:openapi-generator-onlineeq4.2.3
org.openapitools:openapi-generator-onlineeq5.2.1
org.openapitools:openapi-generator-onlineeq5.3.0
org.openapitools:openapi-generator-onlineeq4.1.2
org.openapitools:openapi-generator-onlineeq3.3.3
org.openapitools:openapi-generator-onlineeq3.0.0
org.openapitools:openapi-generator-onlineeq7.1.0

Name	Operator	Version
org.openapitools:openapi-generator-online	eq	4.1.1
org.openapitools:openapi-generator-online	eq	4.2.2
org.openapitools:openapi-generator-online	eq	5.0.0-beta
org.openapitools:openapi-generator-online	eq	4.2.3
org.openapitools:openapi-generator-online	eq	5.2.1
org.openapitools:openapi-generator-online	eq	5.3.0
org.openapitools:openapi-generator-online	eq	4.1.2
org.openapitools:openapi-generator-online	eq	3.3.3
org.openapitools:openapi-generator-online	eq	3.0.0
org.openapitools:openapi-generator-online	eq	7.1.0

Rows per page:

1-10 of 631

References

github.com/OpenAPITools/openapi-generator

github.com/OpenAPITools/openapi-generator/commit/edbb021aadae47dcfe690313ce5119faf77f800d

github.com/OpenAPITools/openapi-generator/pull/18652

github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-g3hr-p86p-593h

nvd.nist.gov/vuln/detail/CVE-2024-35219

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Related for OSV:GHSA-G3HR-P86P-593H