Apache ShenYu (incubating)

3 results · Clear filters · Feed

• High 7.5
  CVE-2022-26650

  Apache ShenYu (incubating) Regular expression denial of service

  In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions…

  Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-bootstrap org.apache.shenyu:shenyu Maven
  May 17, 2022
• High 7.5
  CVE-2022-23945

  Apache ShenYu missing authentication allows gateway registration

  Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

  Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven
  Jan 25, 2022
• High 7.5
  CVE-2022-23223

  Apache ShenYu Password leakage

  On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

  Apache Software Foundation Apache ShenYu (incubating) org.apache.shenyu:shenyu-common Maven
  Jan 25, 2022