Lucene search
Veracode Vulnerability DatabaseVERACODE:29674HistoryMar 12, 2021 - 1:59 a.m.
Information Disclosure
2021-03-1201:59:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.0004 Low
EPSS
Percentile
15.7%
swagger-codegen is vulnerable to information disclosure. The vulnerability exists when the code is generated as a one-off occasion, and is not part of an automated CI/CD process, where the insecure File.createTempFile is used to create temporary files in multiple locations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| swagger-codegen (core library) | le | 2.4.18 |
Related
osv
osv
Generated Code Contains Local Information Disclosure Vulnerability
2021-03-11 03:09:18
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
2021-05-11 00:05:06
CVE-2021-21364
2021-03-11 03:15:12
github
github
cvelist
cvelist
cve
cve
CVE-2021-21363
2021-03-11 03:15:11
CVE-2021-21364
2021-03-11 03:15:12
prion
prion
Design/Logic Flaw
2021-03-11 03:15:00
Design/Logic Flaw
2021-03-11 03:15:00
nvd
nvd
CVE-2021-21363
2021-03-11 03:15:11
CVE-2021-21364
2021-03-11 03:15:12
ibm
ibm