Hacking Swagger-UI - from XSS to account takeovers

We have reported more than 60 instances of this bug across a wide range of bug bounty programs including companies like Paypal, Atlassian, Microsoft, GitLab, Yahoo

Web API Pentesting - HackTricks

Feihui (@Feihui11) / X

Oriana Olivetti (@OlivettiOriana) / X

Swagger UI Library Vulnerability Potentially Affects Multiple Services

XSS, Swagger UI, and Java - A Story in Three Parts - Security, Tech, And Ramblings

Unauthorized Access To Admin Panel via Swagger, by M7arm4n

How to Hack APIs in 2021 - Labs Detectify

SSRF and Account Takeover via XSS in ERPNext (0-day)

Newsletter Archive Archives - API Security News

BingBang: AAD misconfiguration led to Bing.com results manipulation and account takeover

Pawel Schulz on LinkedIn: Hacking Swagger-UI - from XSS to account takeovers

Found +6 DomXSS at different programs (Hacking Swagger-UI), by Adham sayed (doosec101)