Firetruck

CVE-2022-24112

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Apache APISIXApache Software Foundation / Apache APISIX>= 1.3, < Apache APISIX 1*affected
Apache APISIXApache Software Foundation / Apache APISIX>= Apache APISIX 2.10, < 2.10.4affected
Apache APISIXApache Software Foundation / Apache APISIX>= Apache APISIX 2.12, < 2.12.1affected