Smartbear
Products by Smartbear Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2024 there have been 1 vulnerability in Smartbear with an average score of 5.3 out of ten. Last year Smartbear had 4 security vulnerabilities published. Right now, Smartbear is on track to have less security vulnerabilities in 2024 than it did last year. Last year, the average CVE base score was greater by 2.93
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 1 | 5.30 |
| 2023 | 4 | 8.23 |
| 2022 | 3 | 5.50 |
| 2021 | 2 | 6.25 |
| 2020 | 1 | 7.80 |
| 2019 | 2 | 9.30 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Smartbear vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Smartbear Security Vulnerabilities
fastify-swagger-ui is a Fastify plugin for serving Swagger UI
CVE-2024-22207
5.3 - Medium
- January 15, 2024
fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.
Insecure Default Initialization of Resource
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation
CVE-2023-22889
9.8 - Critical
- March 08, 2023
SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.
Code Injection
There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0
CVE-2023-22892
7.5 - High
- March 08, 2023
There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arbitrary files from Zephyr instances.
Exposure of Resource to Wrong Sphere
SmartBear Zephyr Enterprise through 7.15.0
CVE-2023-22890
7.5 - High
- March 08, 2023
SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of service condition.
Unrestricted File Upload
There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0
CVE-2023-22891
8.1 - High
- March 08, 2023
There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords for other accounts.
AuthZ
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim
CVE-2021-46708
6.1 - Medium
- March 11, 2022
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Clickjacking
Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks
CVE-2018-25031
4.3 - Medium
- March 11, 2022
Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions.
Improper Input Validation
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would
CVE-2021-41657
6.1 - Medium
- March 10, 2022
SmartBear CodeCollaborator v6.1.6102 was discovered to contain a vulnerability in the web UI which would allow an attacker to conduct a clickjacking attack.
Clickjacking
swagger-codegen is an open-source project
CVE-2021-21363
7 - High
- March 11, 2021
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This vulnerability is local privilege escalation because the contents of the `outputFolder` can be appended to by an attacker. As such, code written to this directory, when executed can be attacker controlled. For more details refer to the referenced GitHub Security Advisory. This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21364.
Creation of Temporary File With Insecure Permissions
swagger-codegen is an open-source project
CVE-2021-21364
5.5 - Medium
- March 11, 2021
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary directory is shared between all local users. When files/directories are created, the default `umask` settings for the process are respected. As a result, by default, most processes/apis will create files/directories with the permissions `-rw-r--r--` and `drwxr-xr-x` respectively, unless an API that explicitly sets safe file permissions is used. Because this vulnerability impacts generated code, the generated code will remain vulnerable until fixed manually! This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21363.
Incorrect Permission Assignment for Critical Resource
An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5
CVE-2019-12180
7.8 - High
- February 05, 2020
An issue was discovered in SmartBear ReadyAPI through 2.8.2 and 3.0.0 and SoapUI through 5.5. When opening a project, the Groovy "Load Script" is automatically executed. This allows an attacker to execute arbitrary Groovy Language code (Java scripting language) on the victim machine by inducing it to open a malicious Project. The same issue is present in the "Save Script" function, which is executed automatically when saving a project.
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11
CVE-2019-17495
9.8 - Critical
- October 10, 2019
A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product intentionally allows the embedding of untrusted JSON data from remote servers, but it was not previously known that <style>@import within the JSON data was a functional attack method.
Session Riding
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0
CVE-2018-20580
8.8 - High
- May 03, 2019
The WSDL import functionality in SmartBear ReadyAPI 2.5.0 and 2.6.0 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file.
Improper Input Validation