Lokerxxx

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.0.0 through 3.16.0 **Description** An Open Redirect issue exists in the default configuration of the `cas-auth` plugin, where unsanitized cookie values can lead to URL redirection to untrusted sites. This flaw can be leveraged for phishing and credential theft. **Recommendations** Upgrade to version 3.17.0.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.0.0 through 3.16.0 **Description** An open redirect issue exists where an attacker can manipulate client headers, specifically the Host header in the `cas-auth` plugin, to influence the CAS service URL. This can lead to the redirection of users to untrusted sites and potentially expose session tokens. **Recommendations** Upgrade to version 3.17.0.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.8.0 through 3.16.0 **Description** Improper Validation of Integrity Check Value in the `jwe-decrypt` plugin under default configuration allows for authentication bypass. **Recommendations** Upgrade to version 3.17.0.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.5.0 through 3.16.0 **Description** An authentication bypass issue exists in the opa plugin. An attacker can relay spoofed identity headers to upstream services by exploiting non-default configurations in the opa plugin, potentially allowing the attacker to assume higher privileges on the upstream service. **Recommendations** Upgrade to version 3.17.0.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.0.0 through 3.16.0 **Description** A Cross-Site Request Forgery (CSRF) issue exists in the `cas-auth` plugin under default configurations. This allows a remote attacker to trick a victim into visiting a malicious webpage, causing the victim's browser to be authenticated as a different identity. Consequently, actions performed by the victim are attributed to the attacker's identity. **Recommendations** Upgrade to version 3.17.0.

**Name of the Vulnerable Software and Affected Versions** Apache APISIX versions 3.0.0 through 3.16.0 **Description** Improper Authentication occurs when the `cas-auth` plugin is used in a route, potentially allowing an attacker to authenticate using credentials from a different source. **Recommendations** Upgrade to version 3.17.0.