Skip to content
OpenAdvisories

Package · npm

swagger-ui

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2018-25031 Public exploit EPSS 42%

    Spoofing attack in swagger-ui

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be r…

    swagger-ui org.webjars:swagger-ui npm Maven
  • Medium 6.1
    CVE-2016-1000229 Public exploit

    Improper Neutralization of Input During Web Page Generation in swagger-ui

    swagger-ui has XSS in key names

    swagger-ui npm
  • Critical 9.8
    CVE-2019-17495 Public exploit

    Cross-site scripting in Swagger-UI

    A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other w…

    swagger-ui org.webjars:swagger-ui org.webjars.npm:swagger-ui io.springfox:springfox-swagger-ui npm Maven