Swagger UI Injection via Config URL - `███`

How it was found

Summary: A Swagger UI injection vulnerability has been identified on the following endpoint: ███ The issue allows an attacker to inject custom JSON configuration (via the configUrl parameter) into the Swagger UI. This may lead to cross-site scripting (XSS) or manipulation of the Swagger UI behavior, potentially exposing sensitive information or facilitating further attacks.

███████

Impact

This vulnerability could be exploited to perform XSS attacks or inject malicious scripts via the Swagger UI configuration.

System Host(s)

███████

Affected Product(s) and Version(s)

Swagger UI

CVE Numbers

Steps to Reproduce

1. Visit the URL: █████████
2. Observe that the Swagger UI configuration is injected from an external JSON source.

Suggested Mitigation/Remediation Actions

Ensure proper sanitization and validation of all user-controlled inputs, particularly the configUrl parameter, to prevent malicious injections.