Back to the CVE list
CVE-2022-24112 CISA KEV · Actively exploited

Apache APISIX Authentication Bypass Vulnerability

CVSS score

—

EPSS probability

%96.1

Risk score

—

Published

4 y ago

OverviewPublic Exploits (12)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
fatkz/CVE-2022-24112
GitHub

fatkz/CVE-2022-24112

Public PoCSource updated: 23.05.2025 22:12:27
G
btar1gan/exploit_CVE-2022-24112
GitHub

New exploit for Apache APISIX v2.12.1 - Remote code execution (RCE)

Public PoCSource updated: 21.06.2025 16:31:07
G
Acczdy/CVE-2022-24112_POC
GitHub

CVE-2022-24112_POC

Public PoCSource updated: 14.02.2025 17:11:18
G
twseptian/cve-2022-24112
GitHub

Apache APISIX < 2.12.1 Remote Code Execution and Docker Lab

Public PoCSource updated: 19.12.2024 13:32:51
G
kavishkagihan/CVE-2022-24112-POC
GitHub

Apache APISIX 2.12.1 Remote Code Execution by IP restriction bypass and using default admin AIP token

Public PoCSource updated: 22.03.2025 14:38:51
G
M4xSec/Apache-APISIX-CVE-2022-24112
GitHub

Apache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit

Public PoCSource updated: 02.06.2026 23:07:21
G
Mah1ndra/CVE-2022-24112
GitHub

CVE-2022-24112: Apache APISIX Remote Code Execution Vulnerability

Public PoCSource updated: 18.02.2024 09:53:21
G
SecNN/CVE-2022-24112
GitHub

Apache APISIX batch-requests RCE(CVE-2022-24112)

Public PoCSource updated: 06.11.2024 23:16:14
G
CrackerCat/CVE-2022-24112
GitHub

Apache APISIX apisix/batch-requests RCE

Public PoCSource updated: 22.02.2022 20:31:08
G
Mr-xn/CVE-2022-24112
GitHub

CVE-2022-24112：Apache APISIX apisix/batch-requests RCE

Public PoCSource updated: 13.05.2026 19:49:23
E
Apache APISIX 2.12.1 - Remote Code Execution (RCE)
Exploit-DB

Apache APISIX 2.12.1 - Remote Code Execution (RCE)

Exploit referenceSource updated: 16.03.2022 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24112.yaml
Nuclei

Nuclei: Apache APISIX - Remote Code Execution

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-24112"