CVE-2022-24112 — Apache APISIX Authentication Bypass Vulnerability
Description
Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://lists.apache.org/thread/lcdqywz8zy94mdysk7p3gfdgn51jmt94; https://nvd.nist.gov/vuln/detail/CVE-2022-24112
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.