CVE-2024-35219CWE-22

OpenAPI Generator Online - Arbitrary File Read/Delete

High · published May 27, 2024

CVSS v3.1
8.3
EPSS
4%
Percentile
89.4
In the wild
Unconfirmed
What it is

OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.6.0, attackers can exploit a path traversal vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the `outputFolder` option. The issue was fixed in version 7.6.0 by removing the usage of the `outputFolder` option. No known workarounds are available.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03592 · 89.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2024-05-27T16:11Z
EPSS history
Timeline
  • 27 MAY 16:11Z
    OpenAPI Generator Online - Arbitrary File Read/Delete
    cvelistv5