org.apache.shenyu:shenyu-admin
Maven3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting org.apache.shenyu:shenyu-adminpage 1 of 1
- CVE-2021-37580CRITICALCVSS 9.8EG 9.8✓ Fixed in 2.4.12021-11-16
vulnerable: 2.4.0
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0
- CVE-2022-42735HIGHCVSS 8.8EG 8.8✓ Fixed in 2.5.12023-02-15
vulnerable: 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.5.0
Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.…
- CVE-2023-25753MEDIUMCVSS 6.5EG 6.5✓ Fixed in 2.6.02023-10-19
vulnerable: 2.4.0 ... 2.5.1 (6 versions)
There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into t…
Check whether org.apache.shenyu:shenyu-admin is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.shenyu:shenyu-admin CVEs against the assets you own.
Start Free Scan →