PT-2025-13866 · Unknown · Rapidoc Oas Field Formatter

Benji Fisher + 6 · Published 2025-03-31 · Updated 2025-04-01 · CVE-2025-31696

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions RapiDoc OAS Field Formatter versions 0.0.0 through 1.0.0

Description The issue affects the RapiDoc OAS Field Formatter, allowing Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation.

Recommendations For versions 0.0.0 through 1.0.0, update to version 1.0.1 or later to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-31696

DRUPAL-CONTRIB-2025-025

GHSA-86H4-W859-3HHV

Affected Products

Rapidoc Oas Field Formatter

References · 7

• https://osv.dev/vulnerability/GHSA-86h4-w859-3hhv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-31696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-31696 · Security Note
• https://twitter.com/CVEnew/status/1906832634363130326 · Twitter Post
• https://t.me/cvedetector/21661 · Telegram Post
• https://git.drupalcode.org/project/rapidoc_elements_field_formatter · Note
• https://drupal.org/sa-contrib-2025-025 · Note