← Back

Krakend

krakend

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Krakend
krakend
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1561
2Krakend
Luraproject
2Krakend
Lura
Jun 17, 2026
Aug 1, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users s...Show more
Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, but the consumed backend might be vulnerable.Show less