Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:21686
HistoryOct 11, 2019 - 8:20 a.m.

CSS Injection

2019-10-1108:20:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20

EPSS

0.017

Percentile

88.0%

JSON

swagger-ui is vulnerable to CSS injection. The ?url= parameter allows an attacker to override a hard-coded schema file, which would enable for the Relative Path Overwrite (RPO) exploit technique, allowing exfiltration of confidential information from a victim’s browser such as the CSRF token value.

References

Related

ibm 30
nessus 1
osv 2
githubexploit 1
nvd 1
github 1
prion 1
redhat 1
cvelist 1
cve 1
oracle 5
ibm
ibm
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM StoredIQ InstaScan (CVE-2019-17495)
2020-07-10 14:19:22
Security Bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495)
2020-01-20 18:11:27
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with IBM Digital Business Automation Workflow family products (CVE-2019-17495)
2022-09-14 15:02:20
nessus
nessus
Oracle Primavera Gateway (Oct 2020 CPU)
2020-10-22 00:00:00
osv
osv
Cross-site scripting in Swagger-UI
2019-10-15 19:27:05
CVE-2019-17495
2019-10-10 22:15:10
githubexploit
githubexploit
Exploit for Cross-Site Request Forgery (CSRF) in Smartbear Swagger Ui
2020-12-01 09:18:58
nvd
nvd
CVE-2019-17495
2019-10-10 22:15:10
github
github
Cross-site scripting in Swagger-UI
2019-10-15 19:27:05
prion
prion
Design/Logic Flaw
2019-10-10 22:15:00
redhat
redhat
(RHSA-2020:0192) Moderate: Open Liberty 20.0.0.1 Runtime security update
2020-01-21 17:25:54
cvelist
cvelist
CVE-2019-17495
2019-10-10 21:04:49
cve
cve
CVE-2019-17495
2019-10-10 22:15:10
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00

EPSS

0.017

Percentile

88.0%

JSON
Related for VERACODE:21686
ibm30nessus1osv2githubexploit1nvd1github1prion1redhat1cvelist1cve1oracle5