OpenAPITools Vulnerabilities and Affected Products
Vulnerabilities associated with OpenAPI Generator.
Products
Clear product- openapi-generator4 vulnerabilities
- OpenAPI Generator1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-35219HIGH | OpenAPI Generator Online - Arbitrary File Read/DeleteOpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the `outputFolder` option. The issue was fixed in version 7.6.0 by removing the usage of the `outputFolder` option. No … | CVSS8.3v3.1 | EPSS3.59% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |