CVE:CVE-2021-32701
CNNVD:CNNVD-202106-1597
ORY Oathkeeper是开源的一个身份访问代理(IAP)和访问控制决策API，基于一组访问规则授权HTTP请求。
ORY Oathkeeper存在安全漏洞，该漏洞源于一个身份访问代理(IAP)和访问控制决策API，基于一组访问规则授权HTTP请求。
solution:Upgrade ory oathkeeper to a higher version than 0.38.0:beta2,0.38.1:beta2,0.38.2:beta1,0.38.3:beta1,0.38.4:beta1,0.38.5:beta1,0.38.6:beta1,0.38.7:beta1,0.38.8:beta1,0.38.9:beta1,0.38.10:beta2,0.38.11:beta1,and avoid the version 0.38.0:beta2,0.38.1:beta2,0.38.2:beta1,0.38.3:beta1,0.38.4:beta1,0.38.5:beta1,0.38.6:beta1,0.38.7:beta1,0.38.8:beta1,0.38.9:beta1,0.38.10:beta2,0.38.11:beta1