Cross-Site Scripting in swagger-ui

CVE-2016-5682 → View on GitHub ↗ View on CVE.org ↗ View on NVD ↗

Description

Affected versions of swagger-ui contain a cross-site scripting vulnerability in the key names of a specific nested object in the JSON document.

Proof of Concept

The vulnerable object structure is:

{
    "definitions": {
        "arbitraryVal": {
            "properties": {
                "<INJECTABLE_KEY_NAME>": "LoremIpsum"
                }
            }
        }
}

Malicious JSON documents can be loaded in by providing a URL to them in the url query string parameter.

Recommendation

Update to version 2.2.1 or later.

Basic information

Type
reviewed
Severity
critical
Advisory on GitHub
Open advisory ↗
Repository advisory
—
Source code
Browse source ↗
Published (advisory)
2020-09-01 15:30:58 UTC
Updated
2023-01-09 05:03:33 UTC
GitHub reviewed
2020-08-31 18:11:42 UTC

EPSS Score

Score Percentile
0.28% 50.88%

CVSS Scores

No CVSS scores in this advisory.

Identifiers

Type Value
GHSA GHSA-p239-93f7-h6xf ↗
CVE CVE-2016-5682 ↗

CWEs

CWE id Name
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected packages (1)

Vulnerable version ranges and first patched releases as published by GitHub.

Ecosystem Package Vulnerable range First patched Vulnerable functions
npm swagger-ui <= 2.2.0 2.2.1 —

References

cvelogic Threat Intelligence