Threats tagged 'ghsa-786q-qrwp-7xp9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.4	CVE-2026-124716Apache APISIX · Incorrect Authorization Vulnerability Medium6.42026-11-13GCVE DatabaseCVE-2026-124716 An incorrect authorization vulnerability exists in Apache APISIX versions 1.4.0 through 3.19.0. Authenticated users with any one of a route's required permissions or scopes can access the protected upstream, bypassing other required permissions and HTTP method restrictions. This issue is fixed in version 3.20.0. Report on CVE-2026-124716 Vulnerability CWE-863 #ghsa-786q-qrwp-7xp9	GCVE Database	2026-11-13

Page 1 of 1