All vulnerabilities
13 / 13
Sort
9.1
CVE-2022-23944CVE
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and…
2022-01-01Pre-auth
EPSS79.0%
pct 99
9.8
CVE-2021-37580CVE
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allow…
2021-01-01Pre-auth
EPSS40.1%
pct 98
9.8
CVE-2021-45029CVE
Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected…
2021-01-01Pre-auth
EPSS6.0%
pct 92
7.5
CVE-2022-23223CVE
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of…
2022-01-01Pre-auth
EPSS4.3%
pct 89
7.5
CVE-2022-23945CVE
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu…
2022-01-01Pre-auth
EPSS3.8%
pct 88
7.5
CVE-2022-26650CVE
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionDat…
2022-01-01Pre-auth
EPSS2.4%
pct 82
8.8
CVE-2022-42735CVE
Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu.
Shen…
2022-01-01
EPSS1.2%
pct 63
8.8
CVE-2022-37435CVE
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to m…
2022-01-01
EPSS1.1%
pct 61
6.5
CVE-2023-25753CVE
There exists an SSRF (Server-Side Request Forgery) vulnerability located at the /sandbox/proxy…
2023-01-01Pre-auth
EPSS0.8%
pct 52
7.5
BDU:2022-01061BDU
Уязвимость программного обеспечения Apache ShenYu связана с недостаточной защитой регистрационн…
2022-01-01apache software foundationPre-auth
EPSS0.0%
pct 0
9.1
BDU:2022-01057BDU
Уязвимость программного обеспечения Apache ShenYu связана с отсутствием авторизации для критичн…
2022-01-01apache software foundationPre-auth
EPSS0.0%
pct 0
7.5
BDU:2022-01056BDU
Уязвимость программного обеспечения Apache ShenYu связана с отсутствием авторизации для критичн…
2022-01-01apache software foundationPre-auth
EPSS0.0%
pct 0
9.8
BDU:2022-00791BDU
Уязвимость программного обеспечения Apache ShenYu связана с неверным управлением генерацией код…
2022-01-01apache software foundationPre-auth
EPSS0.0%
pct 0
Select a vulnerability on the left to open the preview.