CVE-2018-25031 PoC — Swagger UI 输入验证错误漏洞

Description

Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031)

介绍

# Exploit Swagger UI - CVE-2018-25031
Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031).

This exploit checks whether the Swagger UI used is susceptible to exploitation of the User Interface (UI) Misrepresentation of Critical Information vulnerability.

## Requirements
- Python 3
- Selenium
- Chrome Webdriver

## First use
Install Selenium
```
pip install selenium 
```
Clone the repository
```
git clone https://github.com/rafaelcintralopes/SwaggerUI-CVE-2018-25031.git
```
Change web browser driver path
```
drive_service = Service("C:/chromedriver.exe")
```

## Usage
```
python swagger-exploit.py https://[swagger-page].com
```

## References
- [Snyk](https://security.snyk.io/vuln/SNYK-JS-SWAGGERUI-2314885)
- [CVE-2018-25031](https://www.cve.org/CVERecord?id=CVE-2018-25031)

文件快照

备注