Approved changes feed: RSS · Atom

cpe:2.3:a:apache:apisix_dashboard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductApisix Dashboard (f5ff6666-33f7-5dee-95a4-38054a19b2c6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/apisix purl2cpe 2026-06-01 10:14:29.930061
pkg:docker/apache/apisix-dashboard purl2cpe 2026-06-01 10:14:29.930064
pkg:github/apache/apisix-dashboard purl2cpe 2026-06-01 10:14:29.930067

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45232 vulnerable 2026-06-08 05:36:48.003913 security vulnerability on unauthorized access.
In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.
Published: 2021-12-27T15:06:50.000Z
Updated: 2024-08-04T04:39:20.275Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.