Vulnerabilities

TI-2025-21005 CVE-2025-29157 · GHSA-5h97-9fpp-qf3p

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via…

LOW 37

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via accessing a non-existent endpoint/cart, the server returns a 404-error page exposing sensitive information including the Servlet name (d…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00531 Published 2025-09-25 No fix listed CWE-77

TI-2025-21004 CVE-2025-29156 · GHSA-x4fm-c6x2-jhwc

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to…

MEDIUM 60

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00375 Published 2025-09-25 No fix listed CWE-79

TI-2025-21003 CVE-2025-29155 · GHSA-f7h8-qpxm-mqvf

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint

HIGH 70

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00431 Published 2025-09-25 No fix listed CWE-77

Vulnerabilities

Filters

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via…

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to…

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint