Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2021-45232 — Proof-of-concept exploit for CVE-2021-45232, an unauthorized access vulnerability in Apache APISIX Dashboard allowing export/import of admin configuration via API endpoints. | Kitploit
Tools/GitHubGitHub/ltidi2000/cve-2021-45232
Vulnerability AnalysisExploitationWeb Application ExploitationMisconfigurationAPI Security
GitHubltidi2000/cve-2021-45232

CVE-2021-45232

Proof-of-concept exploit for CVE-2021-45232, an unauthorized access vulnerability in Apache APISIX Dashboard allowing export/import of admin configuration via API endpoints.

View Repository
1344 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Apache APISIX Dashboard Unauthorized Access Vulnerability (CVE-2021-45232)

FOFA Query

title="Apache APISIX Dashboard"

Affected Scope

Apache APISIX Dashboard < 2.10.1

POC:

root@kitploit:~
IP:PORT/apisix/admin/migrate/export

image

Remediation Suggestions

  • Upgrade to the latest security version Apache APISIX Dashboard 2.10.1: https://github.com/apache/apisix-dashboard/releases/tag/v2.10.1

  • Change the default username and password, and configure a whitelist for accessing Apache APISIX Dashboard.

References

https://apisix.apache.org/zh/blog/2021/12/28/dashboard-cve-2021-45232/

Download Tool