CVE-2018-25031

CVE-2018-25031 CVE-2018-25031 漏洞利用测试 Swagger UI 4.1.3 之前的版本可能允许远程攻击者进行欺骗攻击。通过诱使受害者打开精心构造的 URL，攻击者可以利用此漏洞显示远程 OpenAPI 定义。 HowTo 找到文档端点，并添加参数 "configUrl" 指向 test.json 或 "url" 指向 test.yaml。 https://exemple.com/?configUrl=https://raw.githubusercontent.com/mathis2001/CVE-2018-25031/main/test.json...

POC-CVE-2018-25031

CVE-2018-25031 - Swagger UI antes de 4.1.3 Un simple POC CVE-2018-25031 que engaña a la víctima para que ingrese el código de autorización, el cual luego se envía al atacante. Puedes usarlo con la vulnerabilidad XSS https://github.com/VictorNS69/swagger-ui-xss Es necesario encontrar el parámetro ...

CVE-2018-25031

CVE-2018-25031 描述： Swagger UI 4.1.3 之前版本存在一个漏洞，远程攻击者可能利用该漏洞进行欺骗攻击。通过诱骗受害者打开精心构造的 URL，攻击者可利用此漏洞显示远程 OpenAPI 定义。 攻击前截图： PoC： /index.html?configUrl=https://raw.githubusercontent.com/afine-com/CVE-2018-25031/main/poc.json...

Mailcow Dockerized Swagger UI - Cross-Site Scripting

Mailcow-dockerized before 2022-09a uses a vulnerable version of Swagger UI before 4.11.1 that is affected by a DOM-based Cross-Site Scripting XSS vulnerability. When a user accesses the Swagger documentation with a crafted configUrl or url parameter containing JavaScript payloads, arbitrary code...

Fastify Swagger-UI - Information Disclosure

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of @fastify/swagger-ui without baseDir set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting th...

CVE-2018-25031

Swagger UI 跨站脚本漏洞 PoC：CVE-2018-25031 使用 Python 的 Selenium 此仓库包含一个 Python 脚本，演示了 Swagger UI 中跨站脚本 XSS 漏洞的概念验证 PoC，使用了 Selenium 库。本 PoC 的目标是通过利用包含恶意负载的 Swagger UI 来识别易受此漏洞影响的网站。 Swagger UI 中的跨站脚本 XSS 漏洞 Swagger UI 是一款广泛使用的工具，用于通过友好的用户界面来查看和与 API 交互。然而，在 2.9.2 版本中，发现了一个跨站脚本 XSS 漏洞，攻击者可能利用该漏洞向加载的...

CVE-2025-8191

CVE-2025-8191 – Swagger UI XSS注入 描述 : 此仓库包含针对CVE‑2025‑8191的概念验证（PoC）漏洞利用代码，该漏洞存在于Swagger UI中。 该漏洞允许在“description”字段中进行跨站脚本（XSS）注入，导致在Swagger UI版本≤ 1.0.3下远程执行脚本。 参考文献 : NVD条目: https://nvd.nist.gov/vuln/detail/CVE-2025-8191 使用方法 : gcc exploit.c argparse.c -o exploit -lcurl ./exploit -u...

SwaggerUI-CVE-2018-25031

Exploit Swagger UI - CVE-2018-25031 Exploit Swagger UI - Representación incorrecta de información crítica en la interfaz de usuario UI CVE-2018-25031. Este exploit comprueba si la interfaz de usuario de Swagger utilizada es susceptible a la explotación de la vulnerabilidad de representación...

swagger-ui

引言：Swagger UI 的作用 Swagger UI 是一个广泛使用的库，它能将 OpenAPI（原 Swagger）规范渲染为交互式 Web 界面。开发者与集成人员无需后端实现即可探索和测试 API。 CVE‑2018‑25031 详情 根本原因：远程规范加载 该漏洞源于 Swagger UI 客户端对用于加载远程配置或规范文件的 URL 查询参数验证不足。涉及的常见参数包括： ?url=.yaml ?configUrl=.json 攻击者可将这些参数指向一个攻击者控制的、远程托管的 OpenAPI 定义或配置文件，该文件可能被易受攻击的实例渲染。 潜在攻击向量...

VulnerableSpringDataRest

易受攻击的 Spring DataRest 应用 这是一个特意构建的 Spring Data REST 应用程序，用于测试和演示 CVE-2017-8046 漏洞，以及通过 REST API 测试命令注入和远程代码执行所面临的挑战。 它支持 Swagger UI，以便与那些依赖 Swagger 文档进行发现和爬取的工具配合使用，例如 OWASP ZAP（Zed Attack Proxy）的 Swagger 插件。 使用方法 在本地克隆仓库 使用 Maven 构建 运行于 关于该项目在渗透测试练习中如何使用的更多详细信息，请参阅...

CVE-2026-13202 HTML Injection in OTDS Swagger UI

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CVE-2026-13202 HTML Injection in OTDS Swagger UI

A vulnerability in OpenText Opentext Directory Services allows Input Data Manipulation. This issue affects Opentext Directory Services: through 22.2...

CLSA-2026-1786375655 TuxCare security update for swagger-ui-dist (2 CVEs)

TuxCare rebuilt swagger-ui-dist to address 2 CVEs. Fixed in 3.52.5-tuxcare.1...

EUVD-2025-210645

The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...

CVE-2025-6508

The CVE-2025-6508 entry concerns the Swagger UI Try-out console in the WSO2 API Manager’s API Publisher docs. A misbehavior allows loading an external Swagger API definition URL, which overwrites existing API definitions in the Publisher portal. This deception can lead users to interact with over...

CVE-2025-6508 User Interface Misrepresentation via Swagger UI Try-out Console in WSO2 API Manager Allows Sensitive Information Exposure or Unintended Requests

The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...

CVE-2025-6508: Improper Neutralization of Input During Web Page Generation

The Swagger UI Try-out console within the API Publisher documentation allows an external Swagger API definition URL to be loaded, overriding the existing API definitions within the Publisher portal. By exploiting this vulnerability, malicious actors can deceive users into interacting with these...

CLSA-2026-1785468079 TuxCare security update for swagger-ui (3 CVEs)

TuxCare rebuilt swagger-ui to address 3 CVEs. Fixed in 2.2.10-tuxcare.1...

GitLab 15.11 < 18.4.6 / 18.5 < 18.5.4 / 18.6 < 18.6.2 (CVE-2025-12029)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certain circumstances, allowed an...

BIT-GITLAB-2025-12029 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certain circumstances, allowed an unauthenticated user to perform unauthorized actions on behalf of another user by injecting malicious...