Описание
swagger-ui has XSS in key names
Ссылки
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
- Third Party AdvisoryVDB Entry
- Third Party Advisory
- Issue TrackingThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:smartbear:swagger-ui:-:*:*:*:*:*:*:*
Конфигурация 2
Одно из
cpe:2.3:a:redhat:jboss_fuse:6.3:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openshift:2.0:*:*:*:enterprise:*:*:*
EPSS
Процентиль: 89%
0.0485
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
больше 3 лет назад
Improper Neutralization of Input During Web Page Generation in swagger-ui
EPSS
Процентиль: 89%
0.0485
Низкий
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79