Lucene search

PRIOn knowledge basePRION:CVE-2023-27162

HistoryMar 31, 2023 - 8:15 p.m.

Server side request forgery (ssrf)

2023-03-3120:15:00

PRIOn knowledge base

www.prio-n.com

ssrf

openapi-generator

api vulnerability

network access

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.3%

JSON

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

CPENameOperatorVersion
openapi_generatorle6.4.0

CPE	Name	Operator	Version
	openapi_generator	le	6.4.0

References

openapi-generator.com

gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08

github.com/OpenAPITools/openapi-generator

notes.sjtu.edu.cn/s/2_yki_2Xq