org.apache.shenyu:shenyu-common

Maven6 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.apache.shenyu:shenyu-commonpage 1 of 1

CVE-2021-45029CRITICALCVSS 9.8EG 9.8✓ Fixed in 2.4.2
2022-01-25
vulnerable: 2.4.0, 2.4.1
Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
CVE-2022-23223HIGHCVSS 7.5EG 7.5✓ Fixed in 2.4.2
2022-01-25
vulnerable: 2.4.0, 2.4.1
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
CVE-2022-23944CRITICALCVSS 9.1EG 9.1✓ Fixed in 2.4.2
2022-01-25
vulnerable: 2.4.0, 2.4.1
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
CVE-2022-23945HIGHCVSS 7.5EG 7.5✓ Fixed in 2.4.2
2022-01-25
vulnerable: 2.4.0, 2.4.1
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
CVE-2022-37435HIGHCVSS 8.8EG 8.8✓ Fixed in 2.5.0
2022-09-01
vulnerable: 2.4.2, 2.4.3
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.
CVE-2023-25753MEDIUMCVSS 6.5EG 6.5✓ Fixed in 2.6.0
2023-10-19
vulnerable: 2.4.0 ... 2.5.1 (6 versions)
There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into t…

Check whether org.apache.shenyu:shenyu-common is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.shenyu:shenyu-common CVEs against the assets you own.

Start Free Scan →