PT-2021-14500 · Unknown · Openapi-Generator-Online

Name of the Vulnerable Software and Affected Versions: openapi-generator-online versions prior to 5.1.0 Description: The openapi-generator-online tool creates insecure temporary folders during the code generation process, allowing any user on the system to read and append to the auto-generated...

OpenAPI Tools, OpenAPI Generator – Security Vulnerabilities

OpenAPI Tools OpenAPI Generator is an OpenAPI generator. The product allows automatic generation of API client libraries SDK generation, server stubs, documentation, configuration, etc. for a given OpenAPI specification v2, v3. A security vulnerability exists in Openapi generator. The vulnerabili...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

Impact Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. This vulnerability only impacts unix-like systems where the local system temporary directory is shared between all users. This...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (3.0.2)

org.openapitools:openapi-generator-maven-plugin MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 Source...

cd.connect.openapi:connect-openapi-dart (>=4.1, <=4.7), cd.connect.openapi:connect-openapi-jersey2 (>=4.1, <=4.11) +1 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-dart =4.1, =4.1, =1.1, =2.1...

com.bluetrainsoftware.maven:openapi-dart-generator (>=2.2, <=2.4) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - com.bluetrainsoftware.maven:openapi-dart-generator =2.2, =2.4...

com.bluetrainsoftware.maven:openapi-dart-generator (>=2.5, <=3.10) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.2)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - com.bluetrainsoftware.maven:openapi-dart-generator =2.5, =3.10...

de.jsyn:unifi-api (1.0.0) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.3)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - de.jsyn:unifi-api 1.0.0 Source cves: CVE-2021-21429 Source...

cd.connect.openapi:connect-openapi-jersey2 (>=5.1, <=5.4), io.solvice:onroute-client (>=0.1.4, <=0.1.8) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-jersey2 =5.1, =0.1.4, =0.1.8...

io.github.ally-financial:watchmen (1.0.0-release) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.1)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.github.ally-financial:watchmen 1.0.0-release Source cves:...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +3 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - app.keyconnect.api:keyconnect-api 1.0.0 -...

GHSA-867Q-77CC-98MV Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

Impact Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. This vulnerability only impacts unix-like systems where the local system temporary directory is shared between all users. This...

Insecure Temporary File

org.openapitools, openapi-generator-maven-plugin uses insecure temporary file. The vulnerability exists due to the usage of the function File.createTempFile which allows an attacker can predict the name of the temporary file and potentially gain access to confidential information...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

app.keyconnect.api:keyconnect-api (1.0.0), app.keyconnect:keyconnect-rippled-api (1.0.0) +7 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (>=3.0.2, <=5.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version =3.0.2, =4.1, =4.1, =1.1, =1.0.0, =3.0, =0.1.4, =0.1.8 Source cves: CVE-2021-21429 Source advisory: MEND:CVE-2021-21429...

CVE-2021-21429 Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...