Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

🗓️ 28 Dec 2021 13:08:34Reported by badboycxccType

githubexploit

githubexploit🔗 github.com👁 409 Views

Exploit for Missing Authentication in Apache Apisix Dashboar

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	8 Jan 202208:16	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	5 Jan 202204:13	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Apache Apisix	22 Feb 202214:09	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	31 Dec 202102:12	–	githubexploit
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass (Direct Check)	28 Apr 202200:00	–	nessus
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass	28 Apr 202200:00	–	nessus
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass	14 Nov 202400:00	–	nessus
BDU FSTEC	The vulnerability of the graphical interface of the Apache APISIX Dashboard cloud API gateway lies in the lack of authentication for a critical function, allowing attackers to bypass the authentication process.	10 Feb 202200:00	–	bdu_fstec
Circl	CVE-2021-45232	29 Dec 202105:57	–	circl
CNNVD	Apache Apisix 访问控制错误漏洞	27 Dec 202100:00	–	cnnvd

28 Dec 2021 14:37Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.85943

apache apisix missing authentication cve-2021-45232-poc security vulnerability exploit