CVE-2025-29156

Description

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet

PUBLISHED Reserved 2025-03-11 | Published 2025-09-25 | Updated 2025-09-26 | Assigner mitre

References

github.com/...re/blob/master/src/main/resources/openapi.yaml

www.google.com/...=D&sntz=1&usg=AOvVaw0bPYxOZ-XKNAbTj4h0EOMD

gist.github.com/HouqiyuA/9d2c3f0ba075d01631aff879546e419c

cve.org (CVE-2025-29156)

nvd.nist.gov (CVE-2025-29156)

Download JSON