Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:50:32 +0000 bdu:2026-08917 https://cve.radiocsirt.org/vuln/bdu:2026-08917 bdu:2026-08917 https://cve.radiocsirt.org/vuln/bdu:2026-08917 BIT-apisix-2026-48895 — Apache APISIX: Cas-auth Host header influence on CAS service URL https://cve.radiocsirt.org/vuln/bit-apisix-2026-48895 <p><strong>Affected:</strong> Bitnami: apisix</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: apisix</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-apisix-2026-48895 EUVD-2026-328980 https://cve.radiocsirt.org/vuln/euvd-2026-328980 EUVD-2026-328980 https://cve.radiocsirt.org/vuln/euvd-2026-328980 fkie_cve-2026-48895 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48895 <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48895 GHSA-q562-qrm6-7p84 https://cve.radiocsirt.org/vuln/ghsa-q562-qrm6-7p84 <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> <p>URL Redirection to Untrusted Site (&#39;Open Redirect&#39;) vulnerability in Apache APISIX.</p> <p>The attacker could manipulate some client headers to perform an open-redirect, to potentially expose the session token.</p> <p>This issue affects Apache APISIX: from 3.0.0 through 3.16.0.</p> <p>Users are recommended to upgrade to version 3.17.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-q562-qrm6-7p84