AA
Product
Apache APISIX
On CISA KEVExploited in the wild
27
CVEs
1
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 6High 10Medium 10Low 1
Watch
Add Apache APISIX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-24112 In wildKEV | 9.8 | Feb 11 | apisix/batch-requests plugin allows overwriting the X-REAL-IP header Affected: Apache APISIX 2.12 before 2.12.1; Apache APISIX 2.10 before 2.10.4; 1.3 before Apache APISIX 1* |
Showing 1