CVE-2025-8191
LOW NUCLEImacrozheng mall < 1.0.3 - Cross-Site Scripting via Swagger UI configUrl Parameter
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2025-8191. PoCs published by Byte Reaper, byteReaper77, YanC1e. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a Cross-Site Scripting (XSS) vulnerability in Swagger UI 1.0.3 by crafting a malicious JSON payload that injects JavaScript to exfiltrate cookies. The PoC uses libcurl to send the payload to a vulnerable Swagger UI instance.
Description
A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1.0.3. Affected is an unknown function of the file /swagger-ui/index.html of the component Swagger UI. The manipulation of the argument configUrl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor deleted the GitHub issue for this vulnerability without any explanation. Afterwards the vendor was contacted early about this disclosure via email but did not respond in any way.
Exploits (4)
This exploit demonstrates a Cross-Site Scripting (XSS) vulnerability in Swagger UI 1.0.3 by crafting a malicious JSON payload that injects JavaScript to exfiltrate cookies. The PoC uses libcurl to send the payload to a vulnerable Swagger UI instance.
This repository contains a functional exploit for CVE-2025-8191, a Cross-Site Scripting (XSS) vulnerability in Swagger UI versions ≤ 1.0.3. The exploit crafts a malicious JSON payload with a script tag in the 'description' field, which is then served via a crafted URL to trigger the XSS.
This repository contains functional proof-of-concept exploit code for CVE-2025-8191, demonstrating an XSS vulnerability in Swagger UI. The exploit leverages malicious JavaScript injection in the 'title' and 'description' fields of Swagger YAML files to trigger arbitrary script execution.
This repository demonstrates an HTML injection vulnerability in Swagger UI (CVE-2025-8191) by leveraging the `configURL` parameter to load a malicious YAML configuration. The injected HTML renders a fake login form, showcasing the potential for phishing or credential harvesting.
Nuclei Templates (1)
http.component:"Swagger" || http.component:"swagger" || http.favicon.hash:"-1180440057"
icon_hash="-1180440057"
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N