References https://app.opencve.io/cve/CVE-2026-1194 https://github.com/SourByte05/MineAdmin-Vulnerability/issues/6 https://github.com/advisories/GHSA-wq8p-q8cq-94w5 https://vuldb.com/ff/?user.94279 https://ddpoc.com/DVB-2024-7223.html https://47.114.112.33/DVB-2024-7055.html https://www.ddpoc.com/DVB-2021-558.html https://github.com/mineadmin/MineAdmin
Related VulnerabilitiesPoCCVE-2022-39258: Mailcow Dockerized Swagger UI - Cross-Site ScriptingPoCCVE-2026-55224: MineAdmin < 3.2.0-alpha.2 - Plugin Path Traversal to RCEAJ-Report积木报表 /dataSet/testTransform;swagger-ui 代码执行漏洞 (CVE-2024-7314)jshERP /jshERP-boot/webjars/swagger-ui/css/..;1=1/..;1=1/..;1=1/user/info 权限绕过漏洞(CVE-2025-60801)(CVE-2025-7901)RuoYi Swagger UI组件configUrl参数跨站脚本漏洞Swagger-UI-XSS: 3.14.1<=Swagger-UI-XSS< 3.38.0Exrick Xboot Swagger SecurityController.java服务器端请求伪造(CVE-2025-8527)AJ-Report /;swagger-ui/dataSource/pageList SQL 注入漏洞(CVE-2024-5350)PoCCVE-2018-25031: Swagger UI < 3.38.0 - Cross-Site ScriptingPoCCVE-2025-8191: Swagger UI >=3.14.1 < 3.38.0 - DOM Based Cross-Site ScriptingPoCCVE-2022-0381: WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting