Unauthorized Access Vulnerability in TiCDC Swagger API

Translated
1

Note:
This topic has been translated from a Chinese forum by GPT and might contain errors.

Original topic: TiCDC Swagger API 未授权访问漏洞

| username: TiDBer_CQ

TiCDC Swagger API unauthorized access vulnerability, experts, do you have any solutions?

2
| username: tidb菜鸟一只 | Original post link

Did you upgrade? Swagger is disabled by default after TiDB 5. Could it be that TiDB is disabled but TiCDC is not…

3
| username: TiDBer_CQ | Original post link

It’s not an upgrade. Can it be disabled in the configuration file?

4
| username: tidb菜鸟一只 | Original post link

It seems not possible, you need to recompile… Can you block this port through the firewall to prevent leakage scanning?

5
| username: redgame | Original post link

It’s better to block it with a firewall; that’s what we do here.

6
| username: 大飞哥online | Original post link

Set up the firewall.