org.apache.shenyu:shenyu-admin

3 results · Feed

• Medium 6.5
  CVE-2023-25753

  Server-Side Request Forgery in Apache ShenYu

  There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl paramet…

  Apache Software Foundation Apache ShenYu org.apache.shenyu:shenyu-common org.apache.shenyu:shenyu-admin Maven
  Oct 19, 2023
• High 8.8
  CVE-2022-42735

  Apache ShenYu Admin ultra vires

  Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache …

  Apache Software Foundation Apache ShenYu org.apache.shenyu:shenyu-admin Maven
  Feb 15, 2023
• Critical 9.8
  CVE-2021-37580 Public exploit Scanner template EPSS 41%

  Apache ShenYu Admin bypass JWT authentication

  A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

  Apache Software Foundation Apache ShenYu Admin org.apache.shenyu:shenyu-admin Maven
  Nov 16, 2021