Skip to content
OpenAdvisories

Archive

11 February 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.4
    CVE-2022-0185 Exploited Public exploit EPSS 25%

    A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functi…

    KEV Aug 21, 2024
  • Critical 9.8
    CVE-2022-24112 Exploited Public exploit Scanner template EPSS 96%

    apisix/batch-requests plugin allows overwriting the X-REAL-IP header

    An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of A…

    KEV Aug 25, 2022