CVE-2018-25031

CVE-2018-25031 Тесты эксплойтов для CVE-2018-25031 Swagger UI до версии 4.1.3 мог позволить удалённому злоумышленнику проводить атаки с подменой spoofing. Убедив жертву открыть специально сформированный URL, злоумышленник мог использовать эту уязвимость для отображения удалённых...

CVE-2018-25031

CVE-2018-25031 Description : Swagger UI avant la version 4.1.3 pouvait permettre à un attaquant distant de mener des attaques par usurpation. En persuadant une victime d'ouvrir une URL conçue, un attaquant pourrait exploiter cette vulnérabilité pour afficher des définitions OpenAPI distantes...

POC-CVE-2018-25031

CVE-2018-25031 - 4.1.3 이전의 Swagger UI 피해자를 속여 인증 코드를 입력하게 하여, 해당 코드가 공격자에게 전송되도록 하는 간단한 POCCVE-2018-25031입니다. XSS 취약점 https://github.com/VictorNS69/swagger-ui-xss 와 함께 사용할 수 있습니다. 매개변수를 찾아 올바른 파일을 지정해야 합니다: configUrl 에는 JSON 파일, url 에는 YAML 파일을 지정합니다. 예시: root@kitploit:...

RuoYi 代码注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A code injection vulnerability exists in RuoYi 4.8.1 and earlier versions, which originates from cross-site scripting due to incorrect manipulation of the parameter configUrl in the file /swagger-ui/index.html...

PT-2025-30206

Name of the Vulnerable Software and Affected Versions yangzongzhuan RuoYi versions up to 4.8.1 Description A problematic issue exists in yangzongzhuan RuoYi related to the processing of the /swagger-ui/index.html file within the Swagger UI component. Manipulation of the configUrl argument can lea...

Mars: RXSS on ████ via configUrl parameter

A Reflected Cross-Site Scripting RXSS vulnerability was reported on the Swagger UI page of the Royal Canin eVet API. The vulnerability was identified in the configUrl parameter of the URL. This security flaw allowed an attacker to inject malicious scripts into the web page, which were then execut...