Skip to content
OpenAdvisories

Vendor

KrakenD

2 known vulnerabilities.

Products

KrakenD-CE 2 KrakenD-EE 2 Lura Project 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.0
    CVE-2022-1561

    Crafted backend URLs in Lura Project

    Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerabil…

    KrakenD KrakenD-EE KrakenD-CE Lura Project