Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232 RCE POC Screenshots !P...

CVE-2021-45232

creationtimestamp| type| source ---|---|--- 2021-12-29 05:57:49+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1243 2021-12-29 07:24:12+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1573 2021-12-29 13:42:55+00:00| published-proof-of-concept|...

Exploit for Missing Authentication for Critical Function in Apache Apisix_Dashboard

CVE-2021-45232-POC !https://github.com/bad...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232 security vulnerability on unauthorized access.

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232

In Apache APISIX Dashboard before version 2.10.1, the Manager API is implemented using two frameworks (gin and the droplet-based framework) with all APIs and authentication middleware built on droplet, while some APIs directly call gin interfaces, bypassing authentication. This leads to an authen...