← CVE Intelligence

CVE-2016-5682

n/a / Swagger-UI before 2.2.1 PUBLISHED

Description (CNA)

Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section.

Affected (CNA)

Vendor / product	Versions
n/a / Swagger-UI before 2.2.1	affected Swagger-UI before 2.2.1

CWE

No CWE identifiers supplied.

References

https://community.rapid7.com/community/infosec/blog/2016/09/02/r7-2016-19-persistent-xss-via-unescaped-parameters-in-swagger-ui

ADP enrichment

CVE

No English description supplied.

https://community.rapid7.com/community/infosec/blog/2016/09/02/r7-2016-19-persistent-xss-via-unescaped-parameters-in-swagger-ui