Server-side Request Forgery (SSRF)

openapi-generator is vulnerable to Server-side Request Forgery SSRF. The vulnerability exists due to the improper validation in the /api/gen/clients/language path, allowing an attacker to access network resources and sensitive information via a crafted API request...

Server-side Request Forgery (SSRF)

Overview org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the API endpoints /api/gen/clients/language and /api/gen/servers/framework...

Server side request forgery (ssrf)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162

CVE-2023-27162 affects openapi-generator up to v6.4.0. Affected component: SSRF via /api/gen/clients/{language}, enabling an attacker to access network resources and sensitive information. CVSS v3.1 base score 9.1 (CRITICAL); attack vector network, low complexity, no privileges, no user interacti...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

PT-2023-20982 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: openapi-generator versions up to v6.4.0 Description: The issue is related to a Server-Side Request Forgery SSRF in the component "/api/gen/clients/language". This allows attackers to access network resources and sensitive information via a...

CVE-2023-27162: Server-Side Request Forgery (SSRF)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

OpenAPI-Generator code issues and vulnerabilities

openapi-generator is a software application. It provides an open API interface. A security vulnerability exists in openapi-generator version v6.4.0 and earlier, which stems from the discovery of a vulnerability containing a server-side request forgery SSRF vulnerability via...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

GHSA-27J5-2H6R-C9Q2 OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

com.reprezen.genflow:genflow-tools (>=0.0.6, <=1.0.1), com.reprezen.genflow:openapi-generator (>=0.0.5, <=1.0.1) +5 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.0)

org.openapitools:openapi-generator MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - com.reprezen.genflow:genflow-tools =0.0.6, =0.0.5, =0.0.5, =1.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.0), org.openapitools:openapi-generator-maven-plugin (3.1.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.0)

org.openapitools:openapi-generator MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.1), org.openapitools:openapi-generator-maven-plugin (3.1.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.1)

org.openapitools:openapi-generator MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.3), org.openapitools:openapi-generator-maven-plugin (3.3.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.3)

org.openapitools:openapi-generator MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.3 -...