Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

🗓️ 31 Dec 2021 02:12:43Reported by morhaxType

githubexploit

githubexploit🔗 github.com👁 468 Views

Exploit for CVE-2021-4523

Reporter	Title	Published	Views	Family All 20
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	8 Jan 202208:16	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	28 Dec 202113:08	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard	5 Jan 202204:13	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Spoofing in Apache Apisix	22 Feb 202214:09	–	githubexploit
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass (Direct Check)	28 Apr 202200:00	–	nessus
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass	28 Apr 202200:00	–	nessus
Tenable Nessus	Apache APISIX Dashboard < 2.10.1 Authentication Bypass	14 Nov 202400:00	–	nessus
BDU FSTEC	The vulnerability of the graphical interface of the Apache APISIX Dashboard cloud API gateway lies in the lack of authentication for a critical function, allowing attackers to bypass the authentication process.	10 Feb 202200:00	–	bdu_fstec
Circl	CVE-2021-45232	29 Dec 202105:57	–	circl
CNNVD	Apache Apisix 访问控制错误漏洞	27 Dec 202100:00	–	cnnvd

01 Jan 2022 22:09Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 3.19.8

EPSS0.85943

cve-2021-45232 remote code execution poc screenshot authors modified original project github link exploit