CVE-2024-32638

概要

参考情報

• openwall.com/lists/oss-security/2024/05/02/2 · Mailing List
• lists.apache.org/thread/ngvgxllw4zn4hgngkqw2o225kf9wotov · Mailing List

apisix のその他の脆弱性

• CVE-2026-75020高 8.1Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability in Apache APISIX. A caller who holds val…
• CVE-2026-75005高 7.5Inefficient Algorithmic Complexity vulnerability in Apache APISIX. A single small request can pin a gateway worker at 100% CPU for an exte…
• CVE-2026-74848高 7.5Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache APISIX. An attacker could make oth…
• CVE-2026-63041高 8.8Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX. This vulnerability allows an attacker to escalate privi…
• CVE-2026-49872高 8.1Improper Authentication vulnerability in Apache APISIX. When the cas-auth plugin is used in a route, an attacker can possibly authenticate …