POC-CVE-2018-25031

CVE-2018-25031 - Swagger UI prima della 4.1.3 Un semplice POC CVE-2018-25031 che induce la vittima a inserire il codice di autorizzazione, che viene poi inviato all'attaccante. Puoi usarlo con la vulnerabilità XSS https://github.com/VictorNS69/swagger-ui-xss È necessario trovare il parametro e...

Swagger-HTML-Injection-CVE-2025-8191

https://example.com/swagger/swagger.html?configURL=https://raw.githubusercontent.com/mayank-s16/Swagger-HTML-Injection-CVE-2025-8191/refs/heads/main/test.json...

CVE-2018-25031

CVE-2018-25031 Beschreibung: Swagger UI vor 4.1.3 könnte es einem entfernten Angreifer ermöglichen, Spoofing-Angriffe durchzuführen. Indem er ein Opfer dazu überredet, eine manipulierte URL zu öffnen, könnte ein Angreifer diese Schwachstelle ausnutzen, um entfernte OpenAPI-Definitionen anzuzeigen...

CVE-2018-25031

CVE-2018-25031 Testes de exploração do CVE-2018-25031 O Swagger UI anterior à versão 4.1.3 poderia permitir que um atacante remoto realizasse ataques de falsificação spoofing. Ao convencer uma vítima a abrir uma URL manipulada, um atacante poderia explorar essa vulnerabilidade para exibir...

CVE-2025-7901 yangzongzhuan RuoYi Swagger UI index.html cross site scripting

A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1. It has been rated as problematic. This issue affects some unknown processing of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. The attack may be...

RuoYi 代码注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A code injection vulnerability exists in RuoYi 4.8.1 and earlier versions, which originates from cross-site scripting due to incorrect manipulation of the parameter configUrl in the file /swagger-ui/index.html...

PT-2025-30206

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.1 Description A problematic issue exists in yangzongzhuan RuoYi related to the processing of the /swagger-ui/index.html file within the Swagger UI component. Manipulation of the configUrl argument can lea...

Mars: RXSS on ████ via configUrl parameter

A Reflected Cross-Site Scripting RXSS vulnerability was reported on the Swagger UI page of the Royal Canin eVet API. The vulnerability was identified in the configUrl parameter of the URL. This security flaw allowed an attacker to inject malicious scripts into the web page, which were then execut...