Apache Apisix Vulnerabilities

Apache Apache Apisix vulnerabilities.

2 May 2024

Inconsistent Interpretation of HTTP Requests Vulnerability in Apache APISIX
CVE-2024-32638
ApacheApache Apisix📰

20 April 2022

apisix/jwt-auth may leak secrets in error response
CVE-2022-29266
ApacheApache Apisix7.5HIGH

28 March 2022

Apache APISIX: the body_schema check in request-validation plugin can be bypassed
CVE-2022-25757
ApacheApache Apisix9.8CRITICAL

11 February 2022

apisix/batch-requests plugin allows overwriting the X-REAL-IP header
CVE-2022-24112
ApacheApache Apisix👾🟡EPSS 97%🦅9.8CRITICAL

27 December 2021

security vulnerability on unauthorized access.
CVE-2021-45232
ApacheApache Apisix Dashboard👾🟡EPSS 95%9.8CRITICAL

22 November 2021

Path traversal in request_uri variable
CVE-2021-43557
ApacheApache Apisix👾🟡7.5HIGH

8 June 2021

Bypass network access control
CVE-2021-33190
ApacheApache Apisix Dashboard5.3MEDIUM

7 December 2020

CVE-2020-13945
ApacheApache Apisix👾🟡EPSS 60%6.5MEDIUM

No more vulnerabilities to load.