Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Apisix Dashboard
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-45232 1 Apache 1 Apisix Dashboard 2022-01-07 7.5 HIGH 9.8 CRITICAL
In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.