Http-swagger Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Http-swagger Project records in CISA KEV

No Http-swagger Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Http-swagger 2 records MEDIUM

Records

2 records in Http-swagger · all components

TI-2022-08674 CVE-2022-24863 · GHSA-xg75-q3q5-cqmv

Denial of service in http-swagger

MEDIUM 43

http-swagger is an open source wrapper to automatically generate RESTful API documentation with Swagger 2.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0244 Published 2022-04-18 Partial fix · 1.2.6 CWE-400

TI-2024-16918 CVE-2024-25712 · GHSA-49w7-5r33-jm9m

http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been…

LOW 28

http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been uploaded (via httpSwagger.WrapHandler and *webdav.memFile) can subsequently be accessed via a GET request.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00561 Published 2024-02-11 Fixed in 1.2.6 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0