Junglewise Threat Intelligence

CVE-2023-28640: Apiman vulnerable to permissions bypass due to missing check on API key URL

CVE-2023-28640 · Severity: low · CVSS 3.1 · Published 2023-03-27

Technologies: io.apiman:apiman-manager-api-rest-impl (Maven). Vendors: Maven.

Executive brief

Apiman vulnerable to permissions bypass due to missing check on API key URL

Affected products

  • Maven io.apiman:apiman-manager-api-rest-impl

Related threats