Lucene search
+L

130 matches found

GithubExploit
GithubExploit
added 2021/11/17 1:26 p.m.848 views

Exploit for Improper Authentication in Apache Shenyu

CVE-2021-37580 0x00 Vulnerability Details Vulnerability...

9.8CVSS7.2AI score0.40058EPSS
Exploits2
GithubExploit
GithubExploit
added 2021/11/17 8:33 a.m.285 views

Exploit for Improper Authentication in Apache Shenyu

Apache ShenYu Admin has a vulnerability that allows for authenti...

9.8CVSS7.2AI score0.40058EPSS
Exploits2
CNVD
CNVD
added 2021/11/17 12:0 a.m.89 views

Apache ShenYu licensing issue vulnerability

Apache ShenYu is an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation.An authorization issue vulnerability exists in Apache ShenYu Admin, which stems from a misuse of JWT in ShenuAdminBootstrap allowing an attacker to bypass authentication. No...

9.8CVSS2.6AI score0.40058EPSS
Exploits2References1
NVD
NVD
added 2021/11/16 10:15 a.m.24 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS0.40058EPSS
Exploits2References2
OSV
OSV
added 2021/11/16 10:15 a.m.16 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS9.3AI score
Exploits0References2
Prion
Prion
added 2021/11/16 10:15 a.m.15 views

Authentication flaw

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

7.5CVSS9.2AI score0.40058EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2021/11/16 9:35 a.m.30 views

CVE-2021-37580 Apache ShenYu Admin bypass JWT authentication

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.6AI score0.40058EPSS
Exploits2References2
CVE
CVE
added 2021/11/16 9:35 a.m.107 views

CVE-2021-37580

Apache ShenYu Admin (ShenyuAdminBootstrap) contains an authentication bypass flaw due to the incorrect use of JWT, affecting ShenYu 2.3.0 and 2.4.0. The vulnerability can allow an attacker to bypass authentication and gain admin access, with high-severity CVSS scores (3.1: CRITICAL, base score 9....

9.8CVSS9.3AI score0.40058EPSS
In wildExploits2References2Affected Software1
Positive Technologies
Positive Technologies
added 2021/11/16 12:0 a.m.5 views

PT-2021-21721 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.3.0 through 2.4.0 Description: A flaw was found in Apache ShenYu Admin, where the incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. Recommendations: For versions 2.3.0 and 2.4.0...

9.8CVSS9.3AI score0.40058EPSS
Exploits2References19
CNNVD
CNNVD
added 2021/11/16 12:0 a.m.7 views

Apache ShenYu 授权问题漏洞

Apache ShenYu is an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation.An authorization issue vulnerability exists in Apache ShenYu Admin, which stems from a misuse of JWT in ShenuAdminBootstrap allowing an attacker to bypass authentication. No...

9.8CVSS5.6AI score0.40058EPSS
Exploits2References3
Rows per page
Query Builder