Lucene search
China National Vulnerability DatabaseCNVD-2022-12799HistoryFeb 15, 2022 - 12:00 a.m.
Apache Apisix Remote Code Execution Vulnerability
2022-02-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
101
apache apisix
remote code execution
vulnerability
batch-requests plugin
ip restrictions
apache foundation
cloud-native
microservices
cnvd
EPSS
0.974
Percentile
99.9%
Apache Apisix is a cloud-native microservices API gateway service from the Apache Foundation. A remote code execution vulnerability exists in Apache APISIX, which stems from the productโs batch-requests plugin not effectively limiting batch requests to users. An attacker could bypass the Admin APIโs IP restrictions through this vulnerability, which could easily lead to remote code execution.
Related
checkpoint_advisories
checkpoint_advisories
Apache APISIX Remote Code Execution (CVE-2022-24112)
2022-04-05 00:00:00
packetstorm
packetstorm
Apache APISIX 2.12.1 Remote Code Execution
2022-03-16 00:00:00
Apache APISIX Remote Code Execution
2022-03-07 00:00:00
osv
osv
CVE-2022-24112
2022-02-11 13:15:08
BIT-apisix-2022-24112
2024-03-06 10:51:05
githubexploit
githubexploit
Exploit for Authentication Bypass by Spoofing in Apache Apisix
2024-06-03 17:33:59
Exploit for Authentication Bypass by Spoofing in Apache Apisix
2022-02-25 15:17:28
Exploit for Authentication Bypass by Spoofing in Apache Apisix
2022-03-16 09:19:12
zdt
zdt
Apache APISIX 2.12.1 - Remote Code Execution Exploit
2022-03-16 00:00:00
Apache APISIX Remote Code Execution Exploit
2022-03-07 00:00:00
nessus
nessus
Apache APISIX < 2.10.4 / 2.11.x < 2.12.1 RCE
2022-04-26 00:00:00
prion
prion
Default configuration
2022-02-11 13:15:00
nuclei
nuclei
Apache APISIX - Remote Code Execution
2022-02-23 07:55:27
cvelist
cvelist
nvd
nvd
CVE-2022-24112
2022-02-11 13:15:08
exploitdb
exploitdb
Apache APISIX 2.12.1 - Remote Code Execution (RCE)
2022-03-16 00:00:00
attackerkb
attackerkb
CVE-2022-24112
2022-02-11 00:00:00
CVE-2021-38406
2021-09-09 00:00:00
cisa_kev
cisa_kev
Apache APISIX Authentication Bypass Vulnerability
2022-08-25 00:00:00
cve
cve
CVE-2022-24112
2022-02-11 13:15:08
metasploit
metasploit
APISIX Admin API default access token RCE
2022-02-28 17:09:18
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-03-11 20:26:58
thn
thn
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
2022-08-29 04:23:00
qualysblog
qualysblog
malwarebytes
malwarebytes
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
avleonov
avleonov
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
ics
ics