Non notée
CVE-2022-23223 On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users
Description
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache ShenYu (incubating) 2.4 | premières → < 2.4.2 | 2.4.2 |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20220125 CVE-2022-23223: Password leakage in Apache ShenYu www.openwall.com
- [oss-security] 20220126 CVE-2022-23223: Apache ShenYu (incubating) Password leakage www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache ShenYu (incubating)
Les 5 CVE de Apache ShenYu (incubating) →
CVE-2022-26650
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(),…
Non notée
CVE-2022-23945
Missing authentication on ShenYu Admin when register by HTTP
Non notée
CVE-2022-23944
User can access /plugin api without authentication
Non notée
CVE-2021-45029
Groovy Code Injection & SpEL Injection which lead to Remote Code Execution
Non notée