CVE-2025-27446
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
Résumé
Apache APISIX Java Plugin Runner: Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Incorrect Permission Assignment for Critical Resource vulnerability in Apache APISIX(java-plugin-runner).
Local listening file permissions in APISIX plugin runner allow a local attacker to elevate privileges.
This issue affects Apache APISIX(java-plugin-runner): from 0.2.0 through 0.5.0.
Users are recommended to upgrade to version 0.6.0 or higher, which fixes the issue.
Paquets affectés
Bitnami
apisix
[{"type":"SEMVER","events":[{"introduced":"0.2.0"},{"fixed":"3.9.0"}]}]
Références
- advisory lists.apache.org
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- web openwall.com
- web openwall.com