nic-chen opened a new issue #2275:
URL: https://github.com/apache/apisix-dashboard/issues/2275


   
   # Background
   
   For CVE-2021-45232, we released a repair version 2.10.1 for the 2.10 
version. 
   Maybe some users do not want to upgrade from the old version. 
   So we provide corresponding repair instructions for the repair of the old 
versions.
   
   
   # Steps
   
   ## 1. Download the source code of the corresponding version
   
   Clone the source code to the local and checkout to the branch of the 
corresponding version.
   example:
   
   ```
   git clone https://github.com/apache/apisix-dashboard.git
   git checkout release/2.7
   ```
   
   Or download the source code of the corresponding version from 
[Releases](https://github.com/apache/apisix-dashboard/releases).
   example:
   
   ```
   wget https://github.com/apache/apisix-dashboard/archive/refs/tags/v2.7.tar.gz
   ```
   
   ## 2. disable those two APIs
   
   Remove `migrate.NewHandler` from `factories` in `api/internal/route.go`.
   For example, in version 2.7, delete this line:
   
https://github.com/apache/apisix-dashboard/blob/release/2.7/api/internal/route.go#L79
   
   ## 3. re-build
   
   Re-build APISIX Dashboard following [the 
doc](https://github.com/apache/apisix-dashboard/blob/master/docs/en/latest/install.md).
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to