Path Traversal

org.openapitools, openapi-generator-online is vulnerable to a Path Traversal. The vulnerability is due to unrestricted access to the outputFolder option, which allows attackers to manipulate file paths and potentially read or delete files and folders outside of the intended directory...

Server-side Request Forgery (SSRF)

Overview org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the API endpoints /api/gen/clients/language and /api/gen/servers/framework...

org.openapitools:openapi-generator-gradle-plugin (3.3.0), org.openapitools:openapi-generator-maven-plugin (3.3.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.0)

org.openapitools:openapi-generator MAVEN version 3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.0 -...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6), org.openapitools:openapi-generator-gradle-plugin (3.0.2) +3 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.2)

org.openapitools:openapi-generator MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 -...

org.openapitools:openapi-generator-gradle-plugin (3.1.2), org.openapitools:openapi-generator-maven-plugin (3.1.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.2)

org.openapitools:openapi-generator MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

Insecure Temporary File And Folder

openapi-generator-online uses insecure temporary file and folder. The usage of Files.createTempFile to create temporary files and folders allows auto-generated files to be read and modified by any user on the system...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapi.generator:org.openapi.generator.gradle.plugin (4.1.3), org.openapitools:openapi-generator-gradle-plugin (4.1.3) +2 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.1.3)

org.openapitools:openapi-generator MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapi.generator:org.openapi.generator.gradle.plugin 4.1.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.2), org.openapitools:openapi-generator-maven-plugin (3.2.2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.2)

org.openapitools:openapi-generator MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.2 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.3), org.openapitools:openapi-generator-maven-plugin (3.3.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.3)

org.openapitools:openapi-generator MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.2), org.openapitools:openapi-generator-maven-plugin (3.3.2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.2)

org.openapitools:openapi-generator MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.2 -...

org.openapitools:openapi-generator-gradle-plugin (4.0.0-beta2), org.openapitools:openapi-generator-maven-plugin (4.0.0-beta2) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (4.0.0-beta2)

org.openapitools:openapi-generator MAVEN version 4.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 4.0.0-beta2 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.0), org.openapitools:openapi-generator-maven-plugin (3.2.0) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.2.0)

org.openapitools:openapi-generator MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.0 -...

org.openapitools:openapi-generator-gradle-plugin (3.0.3), org.openapitools:openapi-generator-maven-plugin (3.0.3) +1 more potentially affected by CVE-2021-21430 via org.openapitools:openapi-generator (3.0.3)

org.openapitools:openapi-generator MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.0.3 -...