VYPR

Tyk

by Tyktechnologies

Source repositories

CVEs (1)

  • CVE-2021-23357LowMar 15, 2021
    risk 0.21cvss 3.3epss 0.01

    All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the…