CVE-2022-29266

HIGH · CVSS 7.5 EPSS 7.83%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-04-20 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-29266

Severity

HIGH

CVSS

7.5

EPSS

7.83%

Apache

Original NVD Description

In APache APISIX before 3.13.1, the jwt-auth plugin has a security issue that leaks the user's secret key because the error message returned from the dependency lua-resty-jwt contains sensitive information.