CVE-2022-24280

Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that originate from the Pulsar Proxy's IP address. When the Apache Pulsar Proxy component is used, it is possible to attempt to open TCP/IP connections to any IP address and port that the Pulsar Proxy can connect to. An attacker could use this as a way for DoS attacks that originate from the Pulsar Proxy's IP address. It hasn’t been detected that the Pulsar Proxy authentication can be bypassed. The attacker will have to have a valid token to a properly secured Pulsar Proxy. This issue affects Apache Pulsar Proxy versions 2.7.0 to 2.7.4; 2.8.0 to 2.8.2; 2.9.0 to 2.9.1; 2.6.4 and earlier.

• CWE-20
• CWE-20

• https://lists.apache.org/thread/ghs9jtjfbpy4c6xcftyvkl6swznlom1vMailing List, Vendor Advisory
• https://lists.apache.org/thread/ghs9jtjfbpy4c6xcftyvkl6swznlom1vMailing List, Vendor Advisory

Published

Sep 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24265Cuppa CMS v1.0 was discovered to contain a SQL injection vul…7.5
• CVE-2022-24266Cuppa CMS v1.0 was discovered to contain a SQL injection vul…7.5
• CVE-2022-24272An authenticated user may trigger an invariant assertion dur…6.5
• CVE-2022-24278The package convert-svg-core before 0.6.4 are vulnerable to …9.8
• CVE-2022-24279The package madlib-object-utils before 0.1.8 are vulnerable …7.5
• CVE-2022-2428A crafted tag in the Jupyter Notebook viewer in GitLab EE/CE…7.3
• CVE-2022-24281A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2022-24282A vulnerability has been identified in SINEC NMS (All versio…7.2
• CVE-2022-24285Acer Care Center 4.00.30xx before 4.00.3042 contains a local…7.8
• CVE-2022-24286Acer QuickAccess 2.01.300x before 2.01.3030 and 3.00.30xx be…7.8
• CVE-2022-24287A vulnerability has been identified in SIMATIC PCS 7 V8.2 (A…7.8
• CVE-2022-24288In Apache Airflow, prior to version 2.2.4, some example DAGs…8.8