Rswag Project vulnerabilities
We track 1 vulnerability in Rswag Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 14, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Rswag Project vulnerabilities
- 7.5 High severity
Rswag: Improper Limitation of a Pathname to a Restricted Directory
rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.