fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify/swagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module. The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2024-01-15T15:40:35.252Z
Updated: 2024-08-01T22:35:34.979Z
Reserved: 2024-01-08T04:59:27.373Z
Link: CVE-2024-22207
Vulnrichment
No data.
NVD
Status : Modified
Published: 2024-01-15T16:15:13.437
Modified: 2024-11-21T08:55:48.000
Link: CVE-2024-22207
Redhat
No data.