Homepage

org.openapitools:openapi-generator-online@7.1.0 vulnerabilities

  • latest version

    7.15.0

  • first published

    7 years ago

  • latest version published

    1 months ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.openapitools:openapi-generator-online package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Server-side Request Forgery (SSRF)

    org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API.

    Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the API endpoints /api/gen/clients/{language} and /api/gen/servers/{framework}. It allows attackers to access network resources and sensitive information via a crafted API request.

    How to fix Server-side Request Forgery (SSRF)?

    There is no fixed version for org.openapitools:openapi-generator-online.

    [0,)
    • H
    Directory Traversal

    org.openapitools:openapi-generator-online is an a Spring Boot Server application which hosts a client/server generator API.

    Affected versions of this package are vulnerable to Directory Traversal through the outputFolder option. An attacker can read and delete files and folders from an arbitrary, writable directory by setting the output folder when submitting the request.

    How to fix Directory Traversal?

    Upgrade org.openapitools:openapi-generator-online to version 7.6.0 or higher.

    [,7.6.0)
    Go back to all versions of this package