Server-side Request Forgery (SSRF)

openapi-generator is vulnerable to Server-side Request Forgery SSRF. The vulnerability exists due to the improper validation in the /api/gen/clients/language path, allowing an attacker to access network resources and sensitive information via a crafted API request...

Server-side Request Forgery (SSRF)

Overview org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the API endpoints /api/gen/clients/language and /api/gen/servers/framework...

Server side request forgery (ssrf)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162: Server-Side Request Forgery (SSRF)

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

CVE-2023-27162

CVE-2023-27162 affects openapi-generator up to v6.4.0. Affected component: SSRF via /api/gen/clients/{language}, enabling an attacker to access network resources and sensitive information. CVSS v3.1 base score 9.1 (CRITICAL); attack vector network, low complexity, no privileges, no user interacti...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

OpenAPI-Generator code issues and vulnerabilities

openapi-generator is a software application. It provides an open API interface. A security vulnerability exists in openapi-generator version v6.4.0 and earlier, which stems from the discovery of a vulnerability containing a server-side request forgery SSRF vulnerability via...

PT-2023-20982 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: openapi-generator versions up to v6.4.0 Description: The issue is related to a Server-Side Request Forgery SSRF in the component "/api/gen/clients/language". This allows attackers to access network resources and sensitive information via a...

CVE-2023-27162

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/gen/clients/language. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...

com.ethlo.lamebda:lamebda-core (>=0.4.0, <=0.5.3), com.ethlo.lamebda:lamebda-server (>=0.5.1, <=0.5.3) +28 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.4)

org.openapitools:openapi-generator MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - com.ethlo.lamebda:lamebda-core =0.4.0, =0.5.1, =0.4.0, =0.4.0, =0.4.0, =1.1.0, =1.2.0,...

org.openapitools:openapi-generator-gradle-plugin (3.0.1), org.openapitools:openapi-generator-gradle-plugin-mvn-wrapper (3.0.1) +2 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.1)

org.openapitools:openapi-generator MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.1), org.openapitools:openapi-generator-maven-plugin (3.2.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.1)

org.openapitools:openapi-generator MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.1 -...

GHSA-27J5-2H6R-C9Q2 OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

com.reprezen.genflow:genflow-tools (>=0.0.6, <=1.0.1), com.reprezen.genflow:openapi-generator (>=0.0.5, <=1.0.1) +5 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.0)

org.openapitools:openapi-generator MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - com.reprezen.genflow:genflow-tools =0.0.6, =0.0.5, =0.0.5, =1.0.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.2), org.openapitools:openapi-generator-maven-plugin (3.1.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.2)

org.openapitools:openapi-generator MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.0), org.openapitools:openapi-generator-maven-plugin (3.1.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.0)

org.openapitools:openapi-generator MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

OpenAPI Tools OpenAPI Generator uses HTTP in various files

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved dependencies...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6), org.openapitools:openapi-generator-gradle-plugin (3.0.2) +3 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.2)

org.openapitools:openapi-generator MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 -...