openid-connect Plugin Spear Phishing

The vulnerability of the openid-connect plugin for the Apache APISIX cloud API gateway is related to insufficient verification of data authenticity when processing identification headers. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...

APISIX Forward-Auth Bypass Unauthorized Access

The vulnerability of the forward-auth plugin for the Apache APISIX cloud API lies in the improper handling of CRLF sequences. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by sending specially crafted...

java-plugin-runner Plugin Privilege Escalation

The vulnerability of the java-plugin-runner plugin of the Apache APISIX cloud API gateway is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to increase their privileges...