358 matches found
CVE-2021-21363
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...
CVE-2021-21363
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...
CVE-2021-21364
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...
CVE-2021-21363
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...
Design/Logic Flaw
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21364 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21364 Source advisory: GHSA-HPV8-9RQ5-HQ7W...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21364 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21364 Source advisory: OSV:GHSA-HPV8-9RQ5-HQ7W...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21363 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21363 Source advisory: GHSA-PC22-3G76-GM6J...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21363 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21363 Source advisory: OSV:GHSA-PC22-3G76-GM6J...
CVE-2021-21363
CVE-2021-21363 affects swagger-codegen prior to 2.4.19, where Unix-like systems share a global temporary directory. A collocated user can observe the creation of a temporary subdirectory in the shared temp dir and racing to complete its creation enables local privilege escalation by potentially a...
CVE-2021-21363
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21363 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21363 Source advisory: MEND:CVE-2021-21363...
CVE-2021-21364
CVE-2021-21364 affects the open-source project swagger-codegen. On Unix-like systems, prior to version 2.4.19, a shared system temporary directory allows a local attacker to observe or exploit the creation of temporary files/directories with default permissions, enabling potential data exposure o...
CVE-2021-21364
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...
ai.konduit.serving:konduit-serving-clients (>=0.0.2, <=0.3.0), ai.konduit.serving:konduit-serving-distro-bom (>=0.0.2, <=0.3.0) +207 more potentially affected by CVE-2021-21364 via io.swagger:swagger-codegen (>=2.1.1, <=2.4.18)
io.swagger:swagger-codegen MAVEN version =2.1.1, =0.0.2, =0.0.2, =0.1-1, =1.1, =0.1.13, =1.0.1, =1.1, =1.3, =0.12, =1.1.6, =1.1.7 and more Source cves: CVE-2021-21364 Source advisory: MEND:CVE-2021-21364...
CVE-2021-21363: Creation of Temporary File in Directory with Insecure Permissions
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary...
CVE-2021-21364: Exposure of Sensitive Information to an Unauthorized Actor
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary...
PT-2021-14445
Name of the Vulnerable Software and Affected Versions swagger-codegen versions prior to 2.4.19 Description The system's temporary directory is shared between all users on Unix-like systems, allowing a collocated user to observe and race to complete the creation of a temporary subdirectory. This i...
PT-2021-14446 · Oracle · Jdk
Name of the Vulnerable Software and Affected Versions: swagger-codegen versions prior to 2.4.19 Description: The issue affects generated code, which remains vulnerable until manually fixed. On Unix-Like systems, the system temporary directory is shared between all local users. When...
HugoMario swagger-codegen security vulnerabilities
HugoMario swagger-codegen is an application from HugoMario. It is used to automatically generate API client libraries generate SDKs, server stubs and documentation given an OpenAPI Spec. A security vulnerability exists in swagger-codegen, which can be exploited by an attacker to append the conten...