westone-CVE-2021-45232-scanner

westone-CVE-2021-45232-scanner Les versions antérieures du tableau de bord Apache APISIX 2.10.1 présentent une vulnérabilité de sécurité liée à un accès non autorisé. L'API Manager utilise deux frameworks et introduit le framework droplet sur la base du framework gin ; toutes les API et...

CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...

CVE-2021-45232: Missing Authentication for Critical Function

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework droplet on the basis of framework gin, all APIs and authentication middleware are developed based on framework droplet, but some API directly use the interface of framework gin thus bypassing th...