Homepage
About Snyk

Improper Input Validation The advisory has been revoked - it doesn't affect any version of package io.springfox:springfox-swagger-ui Open this link in a new tab

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-JAVA-IOSPRINGFOX-674160
  • published 16 Nov 2020
  • disclosed 9 Sep 2020
  • credit jackatsw
Report a new vulnerability Found a mistake?

Introduced: 9 Sep 2020

CVE NOT AVAILABLE CWE-20 Open this link in a new tab

Amendment

This was deemed not a vulnerability.

Overview

io.springfox:springfox-swagger-ui is an Automated JSON API documentation for API's built with Spring

Affected versions of this package are vulnerable to Improper Input Validation. The input to the /api-docs?group= URL query parameter is untrusted input and is not encoded before being written to the log.