[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2vHOc2A8dlKoNhU6WrL3arFcZi0tJM_okuZNDKbNRDM":3,"g5a-risk:CVE-2024-22207":125},{"success":4,"data":5,"meta":122},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":26,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":66,"weaknesses":67,"weaknessesCount":45,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":113,"notableEvents":114},"CVE-2024-22207","What is CVE-2024-22207?","fastify-swagger-ui is a Fastify plugin for serving Swagger UI.  Prior to 2.1.0, the default configuration of `@fastify\u002Fswagger-ui` without `baseDir` set will lead to all files in the module's directory being exposed via http routes served by the module.  The vulnerability is fixed in v2.1.0. Setting the `baseDir` option can also work around this vulnerability.","fastify-swagger-ui is a Fastify plugin for serving Swagger UI. Prior to 2.1.0, the default configuration of `@fastify\u002Fswagger-ui` without `baseDir` set will ...","2024-01-15T16:15:13.437","2026-06-17T07:10:56.7",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":33,"CVSSMetricV2":34,"CVSSMetricV40":35},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},[],[],[],0.0229,[36,36,36,36,36,36,36],"Medium",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"smartbear","swagger_ui","*","cpe:2.3:a:smartbear:swagger_ui:*:*:*:*:*:node.js:*:*",1,[47,52,56,60,62,64],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffastify-swagger-ui\u002Fcommit\u002F13d799a2c5f14d3dd5b15892e03bbcbae63ee6f7","GitHub",[51],"Patch",{"url":53,"source":49,"tags":54},"https:\u002F\u002Fgithub.com\u002Ffastify\u002Ffastify-swagger-ui\u002Fsecurity\u002Fadvisories\u002FGHSA-62jr-84gf-wmg4",[55],"Vendor Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240216-0002\u002F","Netapp",[],{"url":48,"source":49,"tags":61},[51],{"url":53,"source":49,"tags":63},[55],{"url":57,"source":58,"tags":65},[],6,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.","Developers often choose default values that leave the product as open and easy to use as possible out-of-the-box, under the assumption that the administrator can (or should) change the default value.  However, this ease-of-use comes at a cost when the default is insecure and the administrator does not change it.","Incomplete","Base","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2024-22207? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-22207, a medium severity cyber security vulnerability from 2024. fastify-swagger-ui is a Fastify plugin for serving Swagge...","CVE-2024-22207, CVE-2024-22207 vulnerability, CVE-2024-22207 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, smartbear security, swagger_ui vulnerability","\u002Fwhat-is\u002Fcve-2024-22207",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-22207","Cybersecurity","CVE-2024-22207, CVE-2024-22207 vulnerability, CVE-2024-22207 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":76,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":26},"1B7560CB-4508-4059-AB35-DA1482ECC357","2.0.0","2.1.0",[],[115],{"id":116,"eventType":117,"eventTime":118,"details":119,"label":120,"color":121},"e8157092-5b1b-4bc2-95ce-e8e950eecb80","LOW_EPSS_DELTA","2026-06-16T04:04:48.506467+00:00","Daily EPSS score decreased by 0.124 on 2024-01-19","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":123,"version":124},1792358967646,"2.0",{"score":126,"band":38,"action":127,"scoredAt":128},42,"Plan remediation","2026-10-16T07:00:28.535469+00:00"]