3932 matches found
swagger-typescript-api vulnerable to code injection via unescaped `servers[0].url` in axios http-client template
Summary swagger-typescript-api interpolates servers0.url directly into a TypeScript string literal inside the HttpClient constructor body of the generated axios client templates/base/http-clients/axios-http-client.ejs:71, without any escaping. A malicious URL containing a " closes the string...
8.3CVSS6.5AI score
SaveExploits0References5Affected Software1
20