Description
Cross Site Scripting (XSS) vulnerability in yapi 1.9.1 allows attackers to execute arbitrary code via the /interface/api edit page.
Remediation
References
https://github.com/YMFE/yapi/issues/2190
https://github.com/YMFE/yapi/issues/2240
Related Vulnerabilities
CVE-2021-42697 Vulnerability in maven package com.typesafe.akka:akka-http-core
CVE-2022-39288 Vulnerability in npm package fastify
CVE-2023-29206 Vulnerability in maven package org.xwiki.platform:xwiki-platform-skin-skinx
CVE-2020-26258 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2021-21322 Vulnerability in npm package fastify-http-proxy