CVE-2023-38337

CVE-2023-38337 is a directory traversal vulnerability affecting rswag_project rswag versions prior to 2.10.1. This flaw allows remote attackers to read arbitrary JSON and YAML files by exploiting rswag-api's ability to expose files outside of the intended OpenAPI specification. The vulnerability carries a CVSS score of 7.5 (HIGH), indicating a critical severity. It is easily exploitable over the network with low complexity and no user interaction, potentially leading to unauthorized disclosure of sensitive information. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or proof-of-concept code. The vulnerability has received minimal community discussion and media coverage, suggesting a low current profile.