Skip to content
OpenAdvisories

Package · Maven

org.openapitools:openapi-generator-online

2 known vulnerabilities.

2 results · Feed

  • High 8.3
    CVE-2024-35219 Scanner template

    OpenAPI Generator Online - Arbitrary File Read/Delete

    OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete fi…

  • Critical 9.3

    Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator

    Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createT…