Lucene search
+L

7 matches found

KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•11 views

Apache ShenYu Admin JWT - Authentication Bypass Detection

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Apache ShenYu 2.""" from kittysploit import from lib.protocols.http.httpclient...

9.8CVSS8.5AI score0.4212EPSS
SaveExploits3References6
osv_ghsa
osv_ghsa
•added 2021/11/17 11:15 p.m.•36 views

GHSA-VPFP-5GWQ-G533 Improper Authentication in Apache ShenYu Admin

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.4212EPSS
SaveExploits3References6
Github Security Blog
Github Security Blog
•added 2021/11/17 11:15 p.m.•60 views

Improper Authentication in Apache ShenYu Admin

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS8.8AI score0.4212EPSS
SaveExploits3References6Affected Software1
attackerkb
attackerkb
•added 2021/11/16 10:15 a.m.•12 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.4212EPSS
SaveExploits3References4Affected Software1
Mend
Mend
•added 2021/11/16 9:35 a.m.•5 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS0.4212EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•4 views

CVE-2021-37580: Improper Authentication

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS5.7AI score0.4212EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•13 views

PT-2021-21721 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.3.0 through 2.4.0 Description: A flaw was found in Apache ShenYu Admin, where the incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. Recommendations: For versions 2.3.0 and 2.4.0...

9.8CVSS9.3AI score0.4212EPSS
SaveExploits3References19
Rows per page
Query Builder