Security Advisory
CVE-2023-38337
7.5
HIGH
Vulnerability Description
rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.
Published Date
July 14, 2023
Official Source
NIST NVD Advisory