Rswag Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rswag Project records in CISA KEV

No Rswag Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rswag 1 record MEDIUM

Records

1 record

TI-2023-19734 CVE-2023-38337 · GHSA-vc79-65pr-q82v

rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via…

MEDIUM 41

rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01271 Published 2023-07-14 Fixed in 2.10.1 CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0