Firetruck

CVE-2022-24112

KEV

Apache APISIX Authentication Bypass Vulnerability

View CVE record →
Vendor / Project
Apache
Product
APISIX
Date added
Aug 25, 2022
Due date
Sep 15, 2022
Known ransomware use
Unknown
CWEs
CWE-290

Description

Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.

Required action

Apply updates per vendor instructions.

Notes