Eclipse API Gateway trust management issue vulnerability

A security vulnerability exists in Eclipse API Gateway versions 1.5.4 through 1.7.3. This vulnerability arises because the default throttling key resolver, ClientIpKeyResolver, generates client bucket keys from the leftmost element of the X-Forwarded-For request header without validating the list...

Eclipse API Gateway authorization issue vulnerability

A security vulnerability exists in Eclipse API Gateway versions 1.1.1 through 1.7.3. This vulnerability arises because the default rate-limiting key resolver, ClientIpKeyResolver, retrieves the rate-limiting bucket key for each client from the leftmost element of the X-Forwarded-For request heade...

Eclipse API Gateway permission and access control issue vulnerability

A security vulnerability exists in Eclipse API Gateway versions 1.1.1 through 1.7.3. This vulnerability arises because the default throttling key resolver ClientIpKeyResolver in the API gateway derives each client bucket key from the leftmost element of the X-Forwarded-For request header. It fail...