You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by yi...@apache.org on 2022/02/19 05:10:02 UTC
[apisix-website] branch master updated: docs: remove chaitin from cve (#892)
This is an automated email from the ASF dual-hosted git repository.
yilinzeng pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/apisix-website.git
The following commit(s) were added to refs/heads/master by this push:
new 7fb71ac docs: remove chaitin from cve (#892)
7fb71ac is described below
commit 7fb71ac48e4bc9d9a6e681790d230b36b45aa04d
Author: yilinzeng <36...@users.noreply.github.com>
AuthorDate: Sat Feb 19 13:09:56 2022 +0800
docs: remove chaitin from cve (#892)
---
website/blog/2022/02/11/cve-2022-24112.md | 5 +----
.../zh/docusaurus-plugin-content-blog/2022/02/11/cve-2022-24112.md | 5 +----
2 files changed, 2 insertions(+), 8 deletions(-)
diff --git a/website/blog/2022/02/11/cve-2022-24112.md b/website/blog/2022/02/11/cve-2022-24112.md
index a007544..b0f2a51 100644
--- a/website/blog/2022/02/11/cve-2022-24112.md
+++ b/website/blog/2022/02/11/cve-2022-24112.md
@@ -4,7 +4,6 @@ keywords:
- Vulnerability
- Header
- IP restrictions
-- CHAITIN
description: In versions prior to Apache APISIX 2.12.1, there is a risk of rewriting X-REAL-IP header after enabling the Apache APISIX `batch- requests` plug-in. Now the processing information will be announced.
tags: [Security]
---
@@ -42,8 +41,6 @@ CVE details: https://nvd.nist.gov/vuln/detail/CVE-2022-24112
## Contributor Profile
-This vulnerability was discovered by CHAITIN in the Real World CTF and reported to the Apache Software Foundation by Sauercloud. Thank you for your contributions to the Apache APISIX community.
-
-
+This vulnerability was reported to the Apache Software Foundation by Sauercloud. Thank you for your contributions to the Apache APISIX community.
diff --git a/website/i18n/zh/docusaurus-plugin-content-blog/2022/02/11/cve-2022-24112.md b/website/i18n/zh/docusaurus-plugin-content-blog/2022/02/11/cve-2022-24112.md
index f84635b..a78e4bb 100644
--- a/website/i18n/zh/docusaurus-plugin-content-blog/2022/02/11/cve-2022-24112.md
+++ b/website/i18n/zh/docusaurus-plugin-content-blog/2022/02/11/cve-2022-24112.md
@@ -4,7 +4,6 @@ keywords:
- 风险公告
- Header
- IP 限制
-- 长亭科技
description: 在 Apache APISIX 2.12.1 之前的版本中，启用 Apache APISIX `batch-requests` 插件之后会存在改写 X-REAL-IP header 风险，现将处理信息进行相关公告。
tags: [Security]
---
@@ -42,8 +41,6 @@ CVE 详细信息：https://nvd.nist.gov/vuln/detail/CVE-2022-24112
## 贡献者简介
-该漏洞由长亭科技在 Real World CTF 中发现，并由 Sauercloud 上报给 Apache 软件基金会。感谢各位对 Apache APISIX 社区的贡献。
-
-
+该漏洞由 Sauercloud 上报给 Apache 软件基金会。感谢各位对 Apache APISIX 社区的贡献。
