Description
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache ShenYu | Apache ShenYu 2.4.2 and 2.4.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.shenyu:shenyu-common | >= 2.4.2, < 2.5.0 | 2.5.0 | GHSA-fjjw-82xw-vfc2 |