Exploit Swagger UI - CVE-2018-25031

Exploit Swagger UI - User Interface (UI) Misrepresentation of Critical Information (CVE-2018-25031).

This exploit checks whether the Swagger UI used is susceptible to exploitation of the User Interface (UI) Misrepresentation of Critical Information vulnerability.

Requirements

• Python 3
• Selenium
• Chrome Webdriver

First use

Install Selenium

pip install selenium 

Clone the repository

git clone https://github.com/rafaelcintralopes/SwaggerUI-CVE-2018-25031.git

Change web browser driver path

drive_service = Service("C:/chromedriver.exe")

Usage

python swagger-exploit.py https://[swagger-page].com

References

• Snyk
• CVE-2018-25031