CVE-2020-13945
MEDIUM6.5EPSS 93.4%發布日:2024/3/6修改日:2025/4/3
也稱為:BIT-apisix-2020-13945
描述
In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.
受影響套件(1)
- Bitnami/apisix>= 1.2.0, < 1.5.1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |