GHSA-6c9x-mj3g-h47x
Spoofing attack in swagger-ui-dist
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | swagger-ui-dist | < 4.1.3 | 4.1.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
References
External links from the advisory. They lead to third-party sites.