What’s Vulnerable › Vulnerabilities

CVE-2023-27162

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-03-31 · updated 2026-07-09
• Weakness: CWE-918

Description

openapi-generator up to v6.4.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/gen/clients/{language}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Affected products

• OpenAPITools openapi-generator: through 6.4.0

References

• https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08
• https://github.com/OpenAPITools/openapi-generator
• https://notes.sjtu.edu.cn/s/2_yki_2Xq
• https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08
• https://github.com/OpenAPITools/openapi-generator
• https://notes.sjtu.edu.cn/s/2_yki_2Xq
• https://gist.github.com/b33t1e/6121210ebd9efd4f693c73b830d8ab08

Get alerted when CVE-2023-27162 or the next vulnerability affects your stack