← All credits

Original discovery by Real World CTF at Chaitin Tech. Reported by Sauercloud.

1 vulnerability record and advisories credit this contributor.

CVE-2022-24112
apisix/batch-requests plugin allows overwriting the X-REAL-IP header