100 matches found
CVE-2021-37580
CVE-2021-37580 Apache ShenYu Admin Authentication Bypass...
CVE-2021-37580
CVE-2021-37580 POC for CVE-2021-37580 0x00 Vulnerability Principle Vulnerability principle: Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 0x01 Single URL root@kitploit: Usage: python3 CVE-2021-37580.py -u url -n username.txt For shenyu-admin-2.4.0, vulnerable versions see below: Fo...
CVE-2021-37580
Apache ShenYu Admin에서 인증 우회 취약점이 발견되었습니다. 공격자는 이 취약점을 통해 JSON Web Token JWT 보안 인증을 우회하여 시스템 백엔드에 직접 접근할 수 있습니다. Apache ShenYu는 모든 마이크로서비스 시나리오에 적용되는 확장 가능하고 고성능이며 응답성이 뛰어난 API 게이트웨이 솔루션입니다. Apache ShenYu Admin에 인증 우회 취약점이 존재합니다. ShenyuAdminBootstrap에서 JWT를 잘못 사용하면 공격자가 인증을 우회할 수 있으며, 이를 통해 시스템 백엔...
Apache-ShenYu-Admin-JWT-CVE-2021-37580-
Este repositorio no tiene un README...
westone-CVE-2021-37580-scanner
westone-CVE-2021-37580-scanner Apache Shenyu is an extensible, high-performance and responsive API gateway solution applied to all micro service scenarios. An authentication bypass vulnerability exists in Apache Shenyu admin. The improper use of JWT in Shenyu admin bootstrap allows an attacker to...
CVE-2023-25753
There exists an SSRF Server-Side Request Forgery vulnerability located at the /sandbox/proxyGateway endpoint. This vulnerability allows us to manipulate arbitrary requests and retrieve corresponding responses by inputting any URL into the requestUrl parameter. Of particular concern is our ability...
CVE-2022-23945
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
CVE-2022-23223
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later...
CVE-2022-23944
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1...
CVE-2022-26650
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matchesconditionData.getParamValue, realData to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource...
EUVD-2022-0510
Malicious code in bioql PyPI...
EUVD-2022-6799
Malicious code in bioql PyPI...
EUVD-2023-0797
Malicious code in bioql PyPI...
EUVD-2022-0603
Malicious code in bioql PyPI...
EUVD-2023-2691
Malicious code in bioql PyPI...
EUVD-2022-3643
Malicious code in bioql PyPI...
CVE-2022-42735
Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch...
CVE-2022-37435
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3...
CVE-2021-37580
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...