cve/2018/CVE-2018-25031.md

CVE-2018-25031

Description

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions.

POC

Reference

• https://security.snyk.io/vuln/SNYK-JS-SWAGGERUI-2314885

Github

• https://github.com/LUCASRENAA/CVE-2018-25031
• https://github.com/Raptiler/test
• https://github.com/ThiiagoEscobar/CVE-2018-25031
• https://github.com/afine-com/CVE-2018-25031
• https://github.com/geozin/POC-CVE-2018-25031
• https://github.com/hev0x/CVE-2018-25031-PoC
• https://github.com/johnlaurance/CVE-2018-25031-test2
• https://github.com/kriso4os/CVE-2018-25031
• https://github.com/mathis2001/CVE-2018-25031
• https://github.com/rafaelcintralopes/SwaggerUI-CVE-2018-25031
• https://github.com/wrkk112/CVE-2018-25031