Lucene search
PRIOn knowledge basePRION:CVE-2024-22207HistoryJan 15, 2024 - 4:15 p.m.
Default configuration
2024-01-1516:15:00
PRIOn knowledge base
www.prio-n.com
2
fastify
plugin
swagger ui
vulnerability
fix
default configuration
files
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module’s directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the baseDir option can also work around this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| swagger_ui | ge | 2.0.0 | |
| swagger_ui | lt | 2.1.0 |
Related
github
github
Default swagger-ui configuration exposes all files in the module
2024-01-16 15:24:41
osv
osv
CVE-2024-22207
2024-01-15 16:15:13
Default swagger-ui configuration exposes all files in the module
2024-01-16 15:24:41
cvelist
cvelist
veracode
veracode
Directory Traversal
2024-01-16 05:04:53
nvd
nvd
CVE-2024-22207
2024-01-15 16:15:13
cve
cve
CVE-2024-22207
2024-01-15 16:15:13