What is GHSA-fjjw-82xw-vfc2?

GHSA-fjjw-82xw-vfc2 is a security advisory published by GitHub Security Advisories with High severity. Apache ShenYu Admin has insecure permissions

Which CVE IDs does GHSA-fjjw-82xw-vfc2 cover?

GHSA-fjjw-82xw-vfc2 covers the following CVE IDs: CVE-2022-37435. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fjjw-82xw-vfc2?

GHSA-fjjw-82xw-vfc2 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-fjjw-82xw-vfc2?

GHSA-fjjw-82xw-vfc2 affects 1 product, including: maven/org.apache.shenyu:shenyu-common:\u003e= 2.4.2, \u003c= 2.4.3.

GHSA-fjjw-82xw-vfc2HighCVSS 8.8

Apache ShenYu Admin has insecure permissions

Vendor

GitHub Security Advisories

Published

September 2, 2022

Last Modified

July 25, 2023

🔗 CVE IDs covered (1)

CVE-2022-37435 →

📋 Description

Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. Version 2.5.0 contains a patch for this issue.

🎯 Affected products1

maven/org.apache.shenyu:shenyu-common:>= 2.4.2, <= 2.4.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-37435
https://lists.apache.org/thread/ndblyxr2fdrvjtgbs1bogxgv2cgk7t28
https://github.com/apache/shenyu/pull/3658
https://github.com/apache/shenyu/releases/tag/v2.5.0
https://github.com/advisories/GHSA-fjjw-82xw-vfc2