100 matches found
Apache-ShenYu-Admin-JWT-CVE-2021-37580-
В этом репозитории нет README...
CVE-2021-37580
CVE-2021-37580 PoC для CVE-2021-37580 0x00 Принцип уязвимости Принцип уязвимости: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Одиночный URL root@kitploit: Использование: python3 CVE-2021-37580.py -u url -n username.txt shenyu-admin-2.4.0, уязвимый, выглядит так:...
westone-CVE-2021-37580-scanner
westone-CVE-2021-37580-scanner Apache Shenyu è una soluzione gateway API estensibile, ad alte prestazioni e reattiva applicata a tutti gli scenari di microservizi. Esiste una vulnerabilità di bypass dell'autenticazione in Apache Shenyu admin. L'uso improprio di JWT nel bootstrap di Shenyu admin...
CVE-2021-37580
Apache ShenYu Admin weist eine Sicherheitslücke zur Authentifizierungsumgehung auf, über die Angreifer die JSON Web Token JWT-Sicherheitsauthentifizierung umgehen und direkt auf das System-Backend zugreifen können. Apache ShenYu ist eine erweiterbare, leistungsstarke, reaktive API-Gateway-Lösung,...
CVE-2021-37580
CVE-2021-37580 Apache ShenYu: bypass dell'autenticazione dell'amministratore...
CVE-2023-25753
There exists an SSRF Server-Side Request Forgery vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability...
CVE-2022-23945
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
CVE-2022-23223
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later...
CVE-2022-23944
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
CVE-2022-26650
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matchesconditionData.getParamValue, realData to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource...
EUVD-2022-0510
Malicious code in bioql PyPI...
EUVD-2023-0797
Malicious code in bioql PyPI...
EUVD-2022-6799
Malicious code in bioql PyPI...
EUVD-2022-0603
Malicious code in bioql PyPI...
EUVD-2022-3643
Malicious code in bioql PyPI...
EUVD-2023-2691
Malicious code in bioql PyPI...
CVE-2022-42735
Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch...
CVE-2022-37435
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3...
CVE-2021-37580
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...