TI-2022-08674 CVE-2022-24863 · GHSA-xg75-q3q5-cqmv
Denial of service in http-swagger
Priority MEDIUM 43
http-swagger is an open source wrapper to automatically generate RESTful API documentation with Swagger 2.0.
Http-swagger Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Http-swagger Project records in CISA KEVNo Http-swagger Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2024-16918 CVE-2024-25712 · GHSA-49w7-5r33-jm9m
http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been…
Priority LOW 28
http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been uploaded (via httpSwagger.WrapHandler and *webdav.memFile) can subsequently be accessed via a GET request.