Lucene search
+L

2 matches found

CNVD
CNVD
•added 2021/11/17 12:00 a.m.•111 views

Apache ShenYu licensing issue vulnerability

Apache ShenYu is an asynchronous, high-performance, cross-language, responsive API gateway from the Apache Foundation.An authorization issue vulnerability exists in Apache ShenYu Admin, which stems from a misuse of JWT in ShenuAdminBootstrap allowing an attacker to bypass authentication. No...

9.8CVSS2.6AI score0.41851EPSS
SaveExploits3References1
attackerkb
attackerkb
•added 2021/11/16 10:15 a.m.•10 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.41851EPSS
SaveExploits3References4Affected Software1
Rows per page
Query Builder