Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.1
CVE-2023-28640
- EPSS 0.12%
- Veröffentlicht 27.03.2023 21:15:12
- Zuletzt bearbeitet 21.11.2024 07:55:43
Apiman is a flexible and open source API Management platform. Due to a missing permissions check, an attacker with an authenticated Apiman Manager account may be able to gain access to API keys they do not have permission for if they correctly guess ...
6.5
CVE-2022-47551
- EPSS 0.36%
- Veröffentlicht 20.12.2022 00:15:10
- Zuletzt bearbeitet 17.04.2025 15:15:53
Apiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the...
1