What is GHSA-vf8h-2wwj-jq22?

GHSA-vf8h-2wwj-jq22 is a security advisory published by GitHub Security Advisories with High severity. Privilege escalation in Apache ShenYu

Which CVE IDs does GHSA-vf8h-2wwj-jq22 cover?

GHSA-vf8h-2wwj-jq22 covers the following CVE IDs: CVE-2022-42735. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vf8h-2wwj-jq22?

GHSA-vf8h-2wwj-jq22 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-vf8h-2wwj-jq22?

GHSA-vf8h-2wwj-jq22 affects 1 product, including: maven/org.apache.shenyu:shenyu-admin:\u003c 2.5.1.

GHSA-vf8h-2wwj-jq22HighCVSS 8.8

Privilege escalation in Apache ShenYu

Vendor

GitHub Security Advisories

Published

February 15, 2023

Last Modified

June 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-42735 →

📋 Description

Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958.

🎯 Affected products1

maven/org.apache.shenyu:shenyu-admin:< 2.5.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-42735
https://lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7
https://github.com/apache/shenyu/pull/3958
https://github.com/advisories/GHSA-vf8h-2wwj-jq22