OpenAPI Generator Online - Arbitrary File Read/Delete
### Impact Attackers can exploit the vulnerability to read and delete files and folders from an arbitrary, writable directory as anyone can set the output folder when submitting the request via the `outputFolder` option. ### Patches The issue was fixed via https://github.com/OpenAPITools/openapi-generator/pull/18652 (included in v7.6.0 release) by removing the usage of the `outputFolder` option. ### Workarounds No workaround available. ### References No other reference available.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35219US | — | — | ||
OpenAPI Generator allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. Prior to version 7.… | ||||
references
External citations — patches, advisories, analysis.
- https://github.com/OpenAPITools/openapi-generatorPACKAGE
- https://github.com/OpenAPITools/openapi-generator/commit/edbb021aadae47dcfe690313ce5119faf77f800dWEB
- https://github.com/OpenAPITools/openapi-generator/pull/18652WEB
- https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-g3hr-p86p-593hWEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-35219ADVISORY
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan