CyberRota Analysis
AI-GeneratedThe swagger-typescript-api tool, prior to version 13.12.2, is vulnerable to a security flaw that allows an attacker to exfiltrate sensitive bearer tokens from developers or CI environments through manipulated OpenAPI specifications. This vulnerability arises from the improper handling of authorization tokens in requests to external URLs, potentially leading to unauthorized access to protected resources. Organizations using affected versions should prioritize updating to version 13.12.2 to mitigate the risk of token leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts getRemoteRequestHeaders forwards --authorizationToken to every URL fetched by fetchRemoteSchemaDocument while warmUpRemoteSchemasCache resolves external $ref URLs, allowing an attacker-controlled OpenAPI spec to exfiltrate the developer or CI bearer token to a cross-origin endpoint. This issue is fixed in version 13.12.2.