← KEV catalog
CISA known exploited vulnerability

CVE-2022-24112

Apache APISIX Authentication Bypass Vulnerability

SOURCE FACT

Apache · APISIX

Apache APISIX contains an authentication bypass vulnerability that allows for remote code execution.

Required action

Apply updates per vendor instructions.

CISA notes

https://lists.apache.org/thread/lcdqywz8zy94mdysk7p3gfdgn51jmt94; https://nvd.nist.gov/vuln/detail/CVE-2022-24112

View source evidence →

CHECK YOUR OUTSIDE-IN INVENTORY

Could this product be present?