CVE-2016-1000229 Improper Neutralization of Input During Web Page Generation in swagger-ui
MediumCVSS 6.1
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
swagger-ui has XSS in key names
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| npm swagger-ui(npm) | < 2.2.1 | 2.2.1 |
| smartbear swagger-ui | All versions | No fix listed |
| redhat jboss fuse | = 6.3 | No fix listed |
| redhat openshift | = 2.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory
- access.redhat.com third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com
- www.securityfocus.com third-party-advisory vdb-entry
- raw.githubusercontent.com third-party-advisory