Description
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was originally claimed to be resolved in 4.1.3. However, third parties have indicated this is not resolved in 4.1.3 and even occurs in that version and possibly others.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 15 repositories · most starred shown
-
mathis2001/CVE-2018-25031 ★ 3 · Jun 28, 2023
CVE-2018-25031 tests
-
rafaelcintralopes/SwaggerUI-CVE-2018-25031 ★ 2 · Apr 14, 2023
Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)
-
afine-com/CVE-2018-25031 ★ 2 · May 26, 2022
.json and .yaml files used to exploit CVE-2018-25031
-
KonEch0/CVE-2018-25031-SG ★ 0 · Nov 15, 2024
CVE-2018-25031-SG
-
natpakun/SSRF-CVE-2018-25031- ★ 0 · Jul 24, 2024
-
h2oa/CVE-2018-25031 ★ 0 · May 21, 2024
-
geozin/POC-CVE-2018-25031 ★ 0 · May 15, 2024
A simple POC (CVE-2018-25031
-
johnlaurance/CVE-2018-25031-test2 ★ 0 · Feb 22, 2024
-
hev0x/CVE-2018-25031-PoC ★ 0 · Dec 13, 2023
PoC of CVE-2018-25031
-
LUCASRENAA/CVE-2018-25031 ★ 0 · Nov 16, 2023
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.webjars:swagger-ui | < 4.1.3 | 4.1.3 | GHSA-cr3q-pqgq-m8c2 |
| npm | swagger-ui | < 4.1.3 | 4.1.3 | GHSA-cr3q-pqgq-m8c2 |
Advisories 3
- WID-SEC-2026-0559 IBM Rational Build Forge: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 1, 2026
- WID-SEC-2023-2528 IBM Rational ClearQuest: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 1, 2023
- WID-SEC-2022-1036 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 15, 2023