A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO

Summary

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.

Timeline

1. Oct 10, 2019, 9:04 PM UTCCVE published
2. Aug 5, 2024, 1:40 AM UTCRecord last updated

Affected versions

• n/a n/a

  Version range not reported

• swagger-uinpm

  fixed in 3.23.11

• org.webjars:swagger-uiMaven

  fixed in 3.23.11

• org.webjars.npm:swagger-uiMaven

  fixed in 3.23.11

• io.springfox:springfox-swagger-uiMaven

  fixed in 2.10.0

References 12