Description
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | swagger-ui-dist | < 4.1.3 | 4.1.3 | GHSA-6c9x-mj3g-h47x |
Advisories 1
- WID-SEC-2022-1036 IBM WebSphere Application Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 15, 2023