Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-27162
9.1
CRITICALCVSS v3
Published
March 31, 2023
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.
OpenAPITools/openapi-generator
GitHubOpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3)
GitHubOpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec (v2, v3)<= 6.4.0NVD