Skip to content
OpenAdvisories

Vendor

apiman

1 known vulnerabilities.

Products

apiman 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2023-28640

    Permissions bypass in Apiman could enable authenticated attacker to unpermitted API Key

    Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess the URL, …

    apiman apiman io.apiman:apiman-manager-api-rest-impl Maven