10 matches found
apish (1.2.11), apish-fork (1.2.12) +6 more potentially affected by unknown CVE via fury-adapter-swagger (>=0.6.2, <=0.9.1)
fury-adapter-swagger NPM version =0.6.2, =1.1.0, =1.0.0, =1.2.8, =0.1.1, =0.3.35 Source cves: unknown CVE Source advisory: MEND:WS-2017-0001...
apish (1.2.11), apish-fork (1.2.12) +6 more potentially affected by CVE-2016-1000249 via fury-adapter-swagger (>=0.6.2, <=0.9.1)
fury-adapter-swagger NPM version =0.6.2, =1.1.0, =1.0.0, =1.2.8, =0.1.1, =0.3.35 Source cves: CVE-2016-1000249 Source advisory: MEND:CVE-2016-1000249...
CVE-2016-1000249
"fury-adapter-swagger" from version 0.2.0 until version 0.9.7 has a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like "/dev/zero"...
apish (1.2.11), apish-fork (1.2.12) +6 more potentially affected by CVE-2016-1000249 via fury-adapter-swagger (>=0.6.2, <=0.9.1)
fury-adapter-swagger NPM version =0.6.2, =1.1.0, =1.0.0, =1.2.8, =0.1.1, =0.3.35 Source cves: CVE-2016-1000249 Source advisory: GHSA-2R7F-4H2C-5X73...
GHSA-2R7F-4H2C-5X73 fury-adapter-swagger allows arbitrary file read from system
fury-adapter-swagger from version 0.2.0 until version 0.9.7 has a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like /dev/zero. Proof of Concept: yaml -...
apish (1.2.11), apish-fork (1.2.12) +6 more potentially affected by CVE-2016-1000249 via fury-adapter-swagger (>=0.6.2, <=0.9.1)
fury-adapter-swagger NPM version =0.6.2, =1.1.0, =1.0.0, =1.2.8, =0.1.1, =0.3.35 Source cves: CVE-2016-1000249 Source advisory: OSV:GHSA-2R7F-4H2C-5X73...
fury-adapter-swagger allows arbitrary file read from system
fury-adapter-swagger from version 0.2.0 until version 0.9.7 has a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like /dev/zero. Proof of Concept: yaml -...
PT-2020-7947
Name of the Vulnerable Software and Affected Versions: fury-adapter-swagger versions 0.2.0 through 0.9.7 Description: The issue allows an attacker to read arbitrary files off the system, potentially leading to the exposure of sensitive data or causing a denial of service condition by attempting t...
Arbitrary File Read And Denial Of Service (DoS)
fury-adapter-swagger is vulnerable to arbitrary file reads off the file system and denial of service DoS attacks. This could be used to retrieve sensitive data, or fill the entire available memory and cause a denial of service by reading/dev/zero...
Arbitrary File Read
Overview Affected versions of fury-adapter-swagger have a weakness that allows an attacker to read arbitrary files off of the system. This can be used to read sensitive data, or to cause a denial of service condition by attempting to read something like /dev/zero. Proof of Concept: --- swagger:...