Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-17495 PoC — Swagger UI 跨站请求伪造漏洞

Source
https://github.com/SecT0uch/CVE-2019-17495-test
Associated Vulnerability
Title:Swagger UI 跨站请求伪造漏洞 (CVE-2019-17495)
Description:Swagger UI是一款支持可视化API资源并能够与之进行交互的开源工具。 Swagger UI 3.23.11之前版本中存在跨站请求伪造漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
File Snapshot

 [4.0K]  /data/pocs/920a725adaf73e2e2befc51209d6fe6b2abb66f7
└── [  71]  test.json

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.