Vulnerabilities > CVE-2024-22207 - Unspecified vulnerability in Smartbear Swagger UI 2.0.0/2.0.1

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
smartbear
NVD
Published: 2024-01-15
Updated: 2024-11-21

Summary

fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.

Vulnerable Configurations

Part Description Count
Application
Smartbear
2

References