Sensitive Data Exposure Vulnerability in Apache APISIX by Apache

CVE-2025-62232

What is CVE-2025-62232?

A vulnerability exists in Apache APISIX that exposes sensitive data through basic authentication logging. If the log level is set to INFO or DEBUG, usernames and passwords are written in plaintext to error logs and can be forwarded to log sinks. This exposure poses a significant risk of credential compromise for affected users. To mitigate this vulnerability, it is advised to upgrade to version 3.14 or later, where a fix has been implemented.

References