Spoofing Vulnerability in Swagger UI by Swagger API
CVE-2018-25031
Key Information:
- Vendor
Smartbear
- Status
- Vendor
- CVE Published:
- 11 March 2022
Badges
What is CVE-2018-25031?
Swagger UI versions 4.1.2 and earlier are susceptible to a spoofing vulnerability that enables remote attackers to mislead users into opening malicious URLs. By persuading users to access crafted URLs, unauthorized entities can exploit this flaw to display potentially harmful remote OpenAPI definitions. Although it was reported that this vulnerability was mitigated in version 4.1.3, third-party assessments have indicated that the issue persists in that version and possibly in others. It is crucial for users of affected versions to apply necessary updates and remain vigilant against potential exploitation.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
EPSS Score
83% chance of being exploited in the next 30 days.
CVSS V3.1
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved