Read the docs

Luraproject

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Luraproject records in CISA KEV

No Luraproject vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lura 1 record LOW

Records

1 record

TI-2022-01432 CVE-2022-1561 · GHSA-mj97-cwp5-r4v9

Crafted backend URLs in Lura Project

Priority LOW 21

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users s…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0059 Published 2022-08-01 Fixed in v2.0.2, v2.0.0 CWE-471
Open these records in search →