Skip to content
OpenAdvisories

Package · Maven

org.webjars:swagger-ui

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2018-25031 Public exploit EPSS 42%

    Spoofing attack in swagger-ui

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

    swagger-ui org.webjars:swagger-ui npm Maven