CVE-2021-45232 | BDVDB-2026-166839 Detail

Description#

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-12-27Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.