Rswag vulnerabilities

1 known vulnerability in Rswag from Rswag Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Rswag: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-38337Jul 14, 2023Rswag ProjectEPSS 1.27%

  rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.