Skip to content
fr Sign in
Not rated

CVE-2022-42735 Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu

Description

Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .

Affected products and versions

Product Affected versions Fixed in
Apache ShenYu 2.5 earliest → 2.5.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache ShenYu

The 3 CVEs of Apache ShenYu →
CVE-2023-25753 There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint Not rated CVE-2022-37435 Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege… Not rated
Track this CVE