CVE-2022-29266

7.5HIGH

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive inform

发布于: 4/20/2022更新于: 11/21/2024
在NVD查看在MITRE查看

描述

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.

AI分析AI驱动

受影响产品

apacheapisix

参考资料