Known Vulnerabilities for Shenyu by Apache
Listed below are 9 of the newest known vulnerabilities associated with "Shenyu" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-25753 json | There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnera... | 6.5 - MEDIUM | 2023-10-19 | 2023-10-25 |
| CVE-2022-42735 json | Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege lo... | 8.8 - HIGH | 2023-02-15 | 2023-11-07 |
| CVE-2022-37435 json | Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administr... | 8.8 - HIGH | 2022-09-01 | 2023-08-02 |
| CVE-2022-26650 json | In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) t... | 7.5 - HIGH | 2022-05-17 | 2023-07-12 |
| CVE-2022-23945 json | Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | 7.5 - HIGH | 2022-01-25 | 2022-02-01 |
| CVE-2022-23944 json | User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1. | 9.1 - CRITICAL | 2022-01-25 | 2022-02-01 |
| CVE-2022-23223 json | On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommen... | 7.5 - HIGH | 2022-01-25 | 2023-10-16 |
| CVE-2021-45029 json | Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1... | 9.8 - CRITICAL | 2022-01-25 | 2022-01-28 |
| CVE-2021-37580 json | A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authen... | 9.8 - CRITICAL | 2021-11-16 | 2021-11-17 |