CVE-2025-27446
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
概要
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).
Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges.
This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0.
Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.
影響パッケージ
Bitnami
apisix
[{"type":"SEMVER","events":[{"introduced":"0.2.0"},{"fixed":"3.9.0"}]}]
参照URL
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web openwall.com
- web openwall.com