CVE-2023-27162
1 advisory.
Maven/org.openapitools:openapi-generator-project CVE-2023-27162: critical 9.1
OpenAPI Generator vulnerable to Server-Side Request Forgery
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 6.4.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wg4w-5m5r-w3p8
- https://nvd.nist.gov/vuln/detail/CVE-2023-27162
- https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08
- https://github.com/OpenAPITools/openapi-generator
- https://notes.sjtu.edu.cn/s/2_yki_2Xq
- http://openapi-generator.com
CVE-2023-27162 · published · modified · JSON