CVE-2024-22207

CVE-2024-22207 is an information disclosure vulnerability affecting smartbear swagger_ui, specifically the fastify-swagger-ui plugin prior to version 2.1.0. Without the baseDir option configured, the plugin exposes all files within its module directory via HTTP routes. This medium-severity vulnerability (CVSS 5.3) has a low attack complexity and could lead to unauthorized disclosure of sensitive information. While no active exploitation or Metasploit modules are reported, Nuclei templates exist for detection, and there is minimal community discussion or media coverage.