Lucene search
China National Vulnerability DatabaseCNVD-2023-23553HistoryFeb 17, 2023 - 12:00 a.m.
Apache ShenYu License Issue Vulnerability (CNVD-2023-23553)
2023-02-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
apache foundation
api gateway
authorization issue
privilege management
vulnerability
0.002 Low
EPSS
Percentile
57.6%
Apache ShenYu, an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation, is vulnerable to authorization issues in versions prior to Apache ShenYu 2.5.1. The vulnerability stems from the presence of improper privilege management, which could be exploited by a low-privilege attacker to create users with higher privileges than their own.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache apache shenyu | lt | 2.5.1 |
Related
osv
osv
Privilege escalation in Apache ShenYu
2023-02-15 12:30:26
CVE-2022-42735
2023-02-15 10:15:16
prion
prion
Privilege escalation
2023-02-15 10:15:00
cvelist
cvelist
CVE-2022-42735 Apache ShenYu Admin ultra vires
2023-02-15 09:38:55
cve
cve
CVE-2022-42735
2023-02-15 10:15:16
github
github
Privilege escalation in Apache ShenYu
2023-02-15 12:30:26
veracode
veracode
Privilege Escalation
2023-02-17 02:04:56
nvd
nvd
CVE-2022-42735
2023-02-15 10:15:16