http://www.openwall.com/lists/oss-security/2022/03/28/2

https://lists.apache.org/thread/03vd2j81krxmpz6xo8p1dl642flpo6fv

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P)

NIST CWE-20

OR
     *cpe:2.3:a:apache:apisix:*:*:*:*:*:*:*:* versions up to (excluding) 2.13.0

http://www.openwall.com/lists/oss-security/2022/03/28/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2022/03/28/2 Mailing List, Third Party Advisory

https://lists.apache.org/thread/03vd2j81krxmpz6xo8p1dl642flpo6fv No Types Assigned

https://lists.apache.org/thread/03vd2j81krxmpz6xo8p1dl642flpo6fv Mailing List, Vendor Advisory

http://www.openwall.com/lists/oss-security/2022/03/28/2 [No Types Assigned]

In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a duplicate key, the attacker can bypass the body_schema validation in the request-validation plugin. For example, `{"string_payload":"bad","string_payload":"good"}` can be used to hide the "bad" input.

Systems satisfy three conditions below are affected by this attack:
1. use body_schema validation in the request-validation plugin
2. upstre

In Apache APISIX before 2.13.0, when decoding JSON with duplicate keys, lua-cjson will choose the last occurred value as the result. By passing a JSON with a duplicate key, the attacker can bypass the body_schema validation in the request-validation plugin. For example, `{"string_payload":"bad","string_payload":"good"}` can be used to hide the "bad" input. Systems satisfy three conditions below are affected by this attack: 1. use body_schema validation in the request-validation plugin 2. upstrea