Lucene search
GoogleOSV:CVE-2022-29266HistoryApr 20, 2022 - 8:15 a.m.
CVE-2022-29266
2022-04-2008:15:07
Google
osv.dev
3
cve-2022-29266
apache apisix
jwt-auth plugin
security issue
lua-resty-jwt
In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user’s secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.
Related
nvd
nvd
CVE-2022-29266
2022-04-20 08:15:07
nessus
nessus
Apache APISIX < 2.13.1 Information Disclosure
2022-06-01 00:00:00
cvelist
cvelist
CVE-2022-29266 apisix/jwt-auth may leak secrets in error response
2022-04-20 07:15:13
osv
osv
BIT-apisix-2022-29266
2024-03-06 10:50:44
prion
prion
Information disclosure
2022-04-20 08:15:00
cve
cve
CVE-2022-29266
2022-04-20 08:15:07