3 matches found
CVE-2022-23223
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later...
7.5CVSS6.8AI score0.04306EPSS
SaveExploits1References1
CVE-2022-23223 Apache ShenYu Password leakage
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later...
7.7AI score0.04306EPSS
SaveExploits1References3
CVE-2022-23223
On Apache ShenYu, versions 2.4.0 and 2.4.1 contain an information disclosure flaw where an endpoint exposed user passwords in HTTP responses. The root cause is tied to how passwords were disclosed by the affected endpoints, as reported across CVE records and vendor advisories. Mitigation is to up...
7.5CVSS7.5AI score0.04306EPSS
SaveExploits1References3Affected Software1
20