en Se connecter

Non notée

CVE-2022-23945 Missing authentication on ShenYu Admin when register by HTTP

Description

Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache ShenYu (incubating) 2.4	premières → < 2.4.2	2.4.2

Références

lists.apache.org lists.apache.org
[oss-security] 20220125 CVE-2022-23945: Apache ShenYu missing authentication allows gateway registration www.openwall.com
[oss-security] 20220126 CVE-2022-23945: Apache ShenYu (incubating) missing authentication allows gateway registration www.openwall.com

Chronologie

Publiée 25 janvier 2022
Dernière modification 3 août 2024

Les 5 CVE de Apache ShenYu (incubating) →

CVE-2022-26650 In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(),… Non notée CVE-2022-23944 User can access /plugin api without authentication Non notée CVE-2022-23223 On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users Non notée CVE-2021-45029 Groovy Code Injection & SpEL Injection which lead to Remote Code Execution Non notée

Suivre cette CVE