Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2025-29156
Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
17.3%
CVSS Severity
CVSS v3 Score
6.1
References
https://gist.github.com/HouqiyuA/9d2c3f0ba075d01631aff879546e419c
https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml
https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2Fswagger-api%2Fswagger-petstore&sa=D&sntz=1&usg=AOvVaw0bPYxOZ-XKNAbTj4h0EOMD
Products affected by CVE-2025-29156
Smartbear
»
Swagger Petstore
»
Version:
1.0.7
cpe:2.3:a:smartbear:swagger_petstore:1.0.7
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved