CVE-2021-45232

In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some API directly use the interface of framework `gin` thus bypassing the authentication.

• CWE-306
• CWE-306

• http://www.openwall.com/lists/oss-security/2021/12/27/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2021/12/27/1Mailing List, Third Party Advisory
• https://lists.apache.org/thread/979qbl6vlm8269fopfyygnxofgqyn6k5Mailing List, Vendor Advisory

Published

Dec 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45226An issue was discovered in COINS Construction Cloud 11.12. D…6.5
• CVE-2021-45227An issue was discovered in COINS Construction Cloud 11.12. D…5.4
• CVE-2021-45228An XSS issue was discovered in COINS Construction Cloud 11.1…5.4
• CVE-2021-45229It was discovered that the "Trigger DAG with config" screen …6.1
• CVE-2021-45230In Apache Airflow prior to 2.2.0. This CVE applies to a spec…6.5
• CVE-2021-45231A link following privilege escalation vulnerability in Trend…7.8
• CVE-2021-45252Multiple SQL injection vulnerabilities are found on Simple F…9.8
• CVE-2021-45253The id parameter in view_storage.php from Simple Cold Storag…9.8
• CVE-2021-45255The email parameter from ajax.php of Video Sharing Website 1…9.8
• CVE-2021-45256A Null Pointer Dereference vulnerability existfs in nasm 2.1…5.5
• CVE-2021-45257An infinite loop vulnerability exists in nasm 2.16rc0 via th…5.5
• CVE-2021-45258A stack overflow vulnerability exists in gpac 1.1.0 via the …5.5