CVE-2019-17495

CRITICAL

Swagger UI < 3.23.11 - CSS Injection via Relative Path Overwrite

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-17495. PoCs published by SecT0uch.

Description

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.

Exploits (1)

References (11)

Core 11
Core References
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuoct2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujan2022.html

Scores

CVSS v3 9.8
EPSS 0.1157
EPSS Percentile 93.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (20)
io.springfox/springfox-swagger-ui 0 - 2.10.0Maven
npm/swagger-ui 0 - 3.23.11npm
oracle/banking_apis 19.1
oracle/banking_apis 19.2
oracle/banking_apis 20.1
oracle/banking_apis 21.1
oracle/banking_apis 18.1 - 18.3
oracle/banking_digital_experience 19.1
oracle/banking_digital_experience 19.2
oracle/banking_digital_experience 20.1
... and 10 more
Published Oct 10, 2019
Tracked Since Feb 18, 2026