swagger-ui

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2019-17495 Public exploit

Cross-site scripting in Swagger-UI

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other w…

swagger-ui org.webjars:swagger-ui org.webjars.npm:swagger-ui io.springfox:springfox-swagger-ui npm Maven

Oct 10, 2019