The vulnerability of the openid-connect plugin for the Apache APISIX cloud API gateway allows attackers to perform spear-phishing attacks.

The vulnerability of the openid-connect plugin for the Apache APISIX cloud API gateway is related to insufficient verification of data authenticity when processing identification headers. Exploiting this vulnerability could allow attackers to perform spear-phishing attacks remotely...