CVE-2021-21363: Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
First published: Thu Mar 11 2021(Updated: )
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This vulnerability is local privilege escalation because the contents of the `outputFolder` can be appended to by an attacker. As such, code written to this directory, when executed can be attacker controlled. For more details refer to the referenced GitHub Security Advisory. This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21364.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Smartbear Swagger-codegen | <2.4.19 |
Remedy
https://github.com/swagger-api/swagger-codegen/commit/987ea7a30b463cc239580d6ad166c707ae942a89
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-21363?
CVE-2021-21363 is a vulnerability in swagger-codegen before version 2.4.19, which allows for unauthorized access to sensitive information.
What is the severity of CVE-2021-21363?
CVE-2021-21363 has a severity rating of high, with a severity value of 7.
How does CVE-2021-21363 affect swagger-codegen?
CVE-2021-21363 affects swagger-codegen versions up to and excluding 2.4.19.
How can I fix CVE-2021-21363?
To fix CVE-2021-21363, users should update swagger-codegen to version 2.4.19 or later.
What are the Common Weakness Enumerations (CWE) associated with CVE-2021-21363?
The Common Weakness Enumerations (CWE) associated with CVE-2021-21363 are CWE-378 (Creation of Temporary File With Insecure Permissions) and CWE-379 (Creation of Temporary File in Directory with Incorrect Permissions).
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/title
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/smartbear
- canonical/smartbear swagger-codegen