CVE-2018-25031

CVE-2018-25031 Beschreibung: Swagger UI vor 4.1.3 könnte es einem entfernten Angreifer ermöglichen, Spoofing-Angriffe durchzuführen. Indem er ein Opfer dazu überredet, eine manipulierte URL zu öffnen, könnte ein Angreifer diese Schwachstelle ausnutzen, um entfernte OpenAPI-Definitionen anzuzeigen...

GHSA-CR3Q-PQGQ-M8C2 Spoofing attack in swagger-ui

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions...

Swagger UI 输入验证错误漏洞

Swagger UI is an open source tool that supports visualizing and interacting with API resources. An input validation error vulnerability exists in Swagger UI versions prior to 4.1.3, which stems from the software's lack of filtering and escaping of user-submitted URL data. This vulnerability can b...

PT-2022-8044 · Unknown · Swagger-Ui

Name of the Vulnerable Software and Affected Versions: Swagger UI versions 4.1.2 and earlier Description: The issue allows a remote attacker to conduct spoofing attacks by persuading a victim to open a crafted URL, which could exploit this vulnerability to display remote OpenAPI definitions...