Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-18269
HistoryJan 27, 2022 - 12:00 a.m.

Apache ShenYu Access Control Error Vulnerability (CNVD-2022-18269)

2022-01-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
6

0.004 Low

EPSS

Percentile

74.4%

Apache ShenYu, an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation, is vulnerable to an access control error in Apache ShenYu versions 2.4.0 and 2.4.1, which stems from a lack of authentication in ShenYu Admin when registering via HTTP. An attacker could exploit this vulnerability to cause unauthorized access to system data or functionality.

CPENameOperatorVersion
apache shenyueq2.4.0
apache shenyueq2.4.1

0.004 Low

EPSS

Percentile

74.4%