CVE-2021-21428

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

Design/Logic Flaw

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

CVE-2021-21428

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

CVE-2021-21428 Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

CVE-2021-21428

CVE-2021-21428 affects the OpenAPI Generator project. The issue originates in the openapi-generator-online component, where temporary folders/files were created using File.createTempFile, allowing other users on the same system to read and potentially modify the auto-generated files. Root cause d...

CVE-2021-21428

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

Openapi generator security vulnerabilities

openapi-generator is a software application. It provides an open API interface. A security vulnerability exists in Openapi generator. The vulnerability arises when the program creates insecure temporary directories that can be read and appended by any user on the system...

CVE-2021-21430: Improper Privilege Management

OpenAPI Generator allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data...

CVE-2021-21428: Improper Privilege Management

Openapi generator is a java tool which allows generation of API client libraries SDK generation, server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation...

PT-2021-14500 · Unknown · Openapi-Generator-Online

Name of the Vulnerable Software and Affected Versions: openapi-generator-online versions prior to 5.1.0 Description: The openapi-generator-online tool creates insecure temporary folders during the code generation process, allowing any user on the system to read and append to the auto-generated...

OpenAPI Tools, OpenAPI Generator – Security Vulnerabilities

OpenAPI Tools OpenAPI Generator is an OpenAPI generator. The product allows automatic generation of API client libraries SDK generation, server stubs, documentation, configuration, etc. for a given OpenAPI specification v2, v3. A security vulnerability exists in Openapi generator. The vulnerabili...

PT-2021-14502 · Unknown · Openapi Generator

Name of the Vulnerable Software and Affected Versions: OpenAPI Generator versions prior to 5.1.0 Description: The issue arises from the use of the JDK method File.createTempFile, which creates insecure temporary files that can leave application and system data vulnerable to attacks. Auto-generate...

CVE-2021-21429

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using File.createTempFile in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to...

io.agrest.openapi:agrest-openapi-designfirst (>=3.0, <=4.6) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (3.0.2)

org.openapitools:openapi-generator-maven-plugin MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.agrest.openapi:agrest-openapi-designfirst =3.0, =4.6 Source...

cd.connect.openapi:connect-openapi-dart (>=4.1, <=4.7), cd.connect.openapi:connect-openapi-jersey2 (>=4.1, <=4.11) +1 more potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.0.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-dart =4.1, =4.1, =1.1, =2.1...

com.bluetrainsoftware.maven:openapi-dart-generator (>=2.2, <=2.4) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - com.bluetrainsoftware.maven:openapi-dart-generator =2.2, =2.4...

com.bluetrainsoftware.maven:openapi-dart-generator (>=2.5, <=3.10) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.2)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - com.bluetrainsoftware.maven:openapi-dart-generator =2.5, =3.10...

de.jsyn:unifi-api (1.0.0) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.2.3)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - de.jsyn:unifi-api 1.0.0 Source cves: CVE-2021-21429 Source...

cd.connect.openapi:connect-openapi-jersey2 (>=5.1, <=5.4), io.solvice:onroute-client (>=0.1.4, <=0.1.8) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.0)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - cd.connect.openapi:connect-openapi-jersey2 =5.1, =0.1.4, =0.1.8...

io.github.ally-financial:watchmen (1.0.0-release) potentially affected by CVE-2021-21429 via org.openapitools:openapi-generator-maven-plugin (4.3.1)

org.openapitools:openapi-generator-maven-plugin MAVEN version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator-maven-plugin and may be impacted: - io.github.ally-financial:watchmen 1.0.0-release Source cves:...