Product · Apache Software Foundation

Apache ShenYu (incubating)

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2022-23944 Scanner template EPSS 79%

Apache ShenYu 2.4.1 Improper access control

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven

Jan 25, 2022
Critical 9.8

CVE-2021-45029

Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection

Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven

Jan 25, 2022