high7.5
CVE-2023-38337
rswag vulnerable to arbitrary JSON and YAML file read via directory traversal
Impact
rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rubygems | rswag | < 2.10.1 | 2.10.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rswag Project | Rswag | before 2.10.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/rswag/rswag/compare/2.9.0...2.10.1
- https://github.com/rswag/rswag/issues/653
- https://github.com/advisories/GHSA-vc79-65pr-q82v
- https://nvd.nist.gov/vuln/detail/CVE-2023-38337
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rswag/CVE-2023-38337.yml