CVE-2024-35219: Improper Limitation of a Pathname to a Restricted Directory

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary,...

PT-2024-5292 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: OpenAPI Generator versions prior to 7.6.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access. Exploitation of this issue may allow a remote attacker to bypass security restrictions a...

OpenAPI Tools, OpenAPI Generator – Security Vulnerabilities

OpenAPI Tools OpenAPI Generator is an OpenAPI generator. The product allows automatic generation of API client libraries SDK generation, server stubs, documentation, configuration, etc. given the OpenAPI specification v2, v3. A security vulnerability exists in OpenAPI Tools OpenAPI Generator prio...

Server-side Request Forgery (SSRF)

openapi-generator is vulnerable to Server-side Request Forgery SSRF. The vulnerability exists due to the improper validation in the /api/gen/clients/language path, allowing an attacker to access network resources and sensitive information via a crafted API request...

Server-side Request Forgery (SSRF)

Overview org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the API endpoints /api/gen/clients/language and /api/gen/servers/framework...

Server side request forgery (ssrf)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162: Server-Side Request Forgery (SSRF)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

PT-2023-20982 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: openapi-generator versions up to v6.4.0 Description: The issue is related to a Server-Side Request Forgery SSRF in the component "/api/gen/clients/language". This allows attackers to access network resources and sensitive information via a...

OpenAPI-Generator code issues and vulnerabilities

openapi-generator is a software application. It provides an open API interface. A security vulnerability exists in openapi-generator version v6.4.0 and earlier, which stems from the discovery of a vulnerability containing a server-side request forgery SSRF vulnerability via...

CVE-2023-27162

CVE-2023-27162 affects openapi-generator up to v6.4.0. Affected component: SSRF via /api/gen/clients/{language}, enabling an attacker to access network resources and sensitive information. CVSS v3.1 base score 9.1 (CRITICAL); attack vector network, low complexity, no privileges, no user interacti...

OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

com.reprezen.genflow:genflow-tools (>=0.0.6, <=1.0.1), com.reprezen.genflow:openapi-generator (>=0.0.5, <=1.0.1) +5 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.0)

org.openapitools:openapi-generator MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - com.reprezen.genflow:genflow-tools =0.0.6, =0.0.5, =0.0.5, =1.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.1), org.openapitools:openapi-generator-gradle-plugin-mvn-wrapper (3.0.1) +2 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.1)

org.openapitools:openapi-generator MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.1 -...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6), org.openapitools:openapi-generator-gradle-plugin (3.0.2) +3 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.2)

org.openapitools:openapi-generator MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.0), org.openapitools:openapi-generator-maven-plugin (3.1.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.0)

org.openapitools:openapi-generator MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.1), org.openapitools:openapi-generator-maven-plugin (3.1.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.1)

org.openapitools:openapi-generator MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.2), org.openapitools:openapi-generator-maven-plugin (3.1.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.2)

org.openapitools:openapi-generator MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.2 -...