Exploitation Summary
EIP tracks 3 public exploits for CVE-2020-13945.
PoCs published by K3ysTr0K3R, YutuSec, including Metasploit module exploits/multi/http/apache_apisix_api_default_token_rce.
A Nuclei detection template is also available.
AI-analyzed exploit summary This is a functional exploit for CVE-2020-13945, targeting Apache APISIX versions 1.2 to 1.5. It plants a backdoor via the Admin API and executes a reverse shell payload.
Description
In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.
Exploits (3)
This is a functional exploit for CVE-2020-13945, targeting Apache APISIX versions 1.2 to 1.5. It plants a backdoor via the Admin API and executes a reverse shell payload.
This repository contains a Go-based exploit for CVE-2021-45232, an unauthenticated API access vulnerability in Apache APISIX. The PoC checks for unauthenticated access to the admin API and demonstrates command execution via route manipulation.
This Metasploit module exploits CVE-2022-24112 in Apache APISIX by leveraging a default admin API token to achieve remote code execution via LUA script injection. It also bypasses IP restrictions using batch requests.
Nuclei Templates (1)
http.title:"apache apisix dashboard"
title="apache apisix dashboard"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N