openapi-generator records
5 published records for vendor openapi-generator.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 80%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-269 Improper Privilege Management2
- CWE-311 Missing Encryption of Sensitive Data1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-918 Server-Side Request Forgery (SSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2023-27162No exploit | openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}.openapi-generator · openapi generator · CWE-918 | Critical9.1 | — | 0.9% | Mar 31, 2023 |
29Monitor | CVE-2019-11405No exploit | OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and buildopenapi-generator · openapi generator · CWE-311 | High7.4 | — | 1.2% | Apr 22, 2019 |
28Monitor | CVE-2021-21428No exploit | Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generatoropenapi-generator · openapi generator · CWE-269 | High7.0 | — | 0.4% | May 10, 2021 |
22Monitor | CVE-2021-21430No exploit | Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala codeopenapi-generator · openapi generator · CWE-269 | Medium5.5 | — | 0.4% | May 10, 2021 |
13Monitor | CVE-2021-21429No exploit | Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven pluginopenapi-generator · openapi generator · CWE-552 | Low3.3 | — | 0.3% | Apr 27, 2021 |
- CVE-2023-2716236Monitor
openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}.
CriticalCVSS 9.1No exploitEPSS 1%openapi-generator · openapi generatorMar 31, 2023
- CVE-2019-1140529Monitor
OpenAPI Tools OpenAPI Generator before 4.0.0-20190419.052012-560 uses http:// URLs in various build.gradle, build.gradle.mustache, and build
HighCVSS 7.4No exploitEPSS 1%openapi-generator · openapi generatorApr 22, 2019
- CVE-2021-2142828Monitor
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator
HighCVSS 7.0No exploitEPSS 0%openapi-generator · openapi generatorMay 10, 2021
- CVE-2021-2143022Monitor
Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code
MediumCVSS 5.5No exploitEPSS 0%openapi-generator · openapi generatorMay 10, 2021
- CVE-2021-2142913Monitor
Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin
LowCVSS 3.3No exploitEPSS 0%openapi-generator · openapi generatorApr 27, 2021