CVE-2016-5682

MEDIUM

Swagger-UI <2.2.1 - XSS

Title source: llm

Description

Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.

References (1)

Scores

CVSS v3 6.1
EPSS 0.0028
EPSS Percentile 51.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (3)

smartbear/swagger-ui < 2.2.1
npm/swagger-ui < 2.2.1npm
n/a/Swagger-UI before 2.2.1 < Swagger-UI before 2.2.1

Timeline

Published Apr 10, 2017
Tracked Since Feb 18, 2026