You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are using springfox swagger in our projects and we received a vulnerability issue from Cobalt who tests our services against vulnerabilities.
The fix to that vulnerability is to disable the config_url query param as any exploiter may add some phishing url to that url and load a malicious configuration file on our network.
Here is a same issue and its fixed from swagger side. Now you need to upgrade swagger-ui dependency as its blocking us from using the springfox.
The text was updated successfully, but these errors were encountered:
huzaifa074
changed the title
Bump Swagger UI Dependency to 4.0.2
Bump Swagger UI Dependency to 4.1.3
Aug 16, 2023
huzaifa074
changed the title
Bump Swagger UI Dependency to 4.1.3
Bump Swagger UI Dependency to latest
Aug 16, 2023
We are using springfox swagger in our projects and we received a vulnerability issue from Cobalt who tests our services against vulnerabilities.
The fix to that vulnerability is to disable the
config_url
query param as any exploiter may add some phishing url to that url and load a malicious configuration file on our network.Here is a same issue and its fixed from swagger side. Now you need to upgrade swagger-ui dependency as its blocking us from using the springfox.
The text was updated successfully, but these errors were encountered: