Skip to main content

Openapi Generator

5 CVEs product

Monthly

CVE-2023-27162 Mar 31, 20:15 Maven CRITICAL POC Act Now

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Openapi Generator
NVD GitHub VulDB
CVSS 3.1
9.1
EPSS
1.0%
CVE-2021-21430 May 10, 20:15 Maven MEDIUM POC PATCH This Month

OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Openapi Generator
NVD GitHub
CVSS 3.1
5.5
EPSS
0.4%
CVE-2021-21428 May 10, 19:15 Maven HIGH POC PATCH This Week

Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated high severity (CVSS 7.0). Public exploit code available.

Privilege Escalation Java Openapi Generator
NVD GitHub
CVSS 3.1
7.0
EPSS
0.4%
CVE-2021-21429 Apr 27, 20:15 Maven LOW PATCH Monitor

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Path Traversal Openapi Generator
NVD GitHub
CVSS 3.1
3.3
EPSS
0.3%
CVE-2019-11405 Apr 22, 11:29 Maven HIGH POC PATCH This Week

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Openapi Generator
NVD GitHub
CVSS 3.0
7.4
EPSS
1.2%
EPSS 1% CVSS 9.1
CRITICAL POC Act Now

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Openapi Generator
NVD GitHub VulDB
EPSS 0% CVSS 5.5
MEDIUM POC PATCH This Month

OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.

Privilege Escalation Openapi Generator
NVD GitHub
EPSS 0% CVSS 7.0
HIGH POC PATCH This Week

Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated high severity (CVSS 7.0). Public exploit code available.

Privilege Escalation Java Openapi Generator
NVD GitHub
EPSS 0% CVSS 3.3
LOW PATCH Monitor

OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Path Traversal Openapi Generator
NVD GitHub
EPSS 1% CVSS 7.4
HIGH POC PATCH This Week

OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build.sbt files, which may have caused insecurely resolved. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Openapi Generator
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy