CVE-2020-13945

In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

4.0 MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

72.98% chance of exploitation in the next 30 days, 99th percentile

Nuclei

medium · CWE-522

Published

2020-12-07

Updated

2024-08-04

Proof-of-concept exploits (3)

• http://packetstormsecurity.com/files/166228/Apache-APISIX-Remote-Code-Execution.html
• K3ysTr0K3R/CVE-2020-13945-EXPLOIT12★ · 2024-07-21
• samurai411/toolbox1★ · 2024-05-10

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13945.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_def…

Vulhub environments (1)

• vulhub/vulhub/tree/master/apisix/CVE-2020-13945

Exploit collections (1)

• zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2020/CVE-2020-13945.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2011-2523
• CVE-2023-38646
• CVE-2020-13942
• CVE-2020-13951
• CVE-2020-13941
• CVE-2020-13955