Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2021/11/17 11:15 p.m.•58 views

Improper Authentication in Apache ShenYu Admin

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS8.8AI score0.41851EPSS
SaveExploits2References6Affected Software1
OSV
OSV
•added 2021/11/17 11:15 p.m.•27 views

GHSA-VPFP-5GWQ-G533 Improper Authentication in Apache ShenYu Admin

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.41851EPSS
SaveExploits2References6
attackerkb
attackerkb
•added 2021/11/16 10:15 a.m.•10 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS7.1AI score0.41851EPSS
SaveExploits2References4Affected Software1
Mend
Mend
•added 2021/11/16 9:35 a.m.•3 views

CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS0.41851EPSS
SaveExploits2References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/16 12:00 a.m.•4 views

CVE-2021-37580: Improper Authentication

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0...

9.8CVSS5.7AI score0.41851EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2021/11/16 12:00 a.m.•11 views

PT-2021-21721 · Apache · Apache Shenyu

Name of the Vulnerable Software and Affected Versions: Apache ShenYu versions 2.3.0 through 2.4.0 Description: A flaw was found in Apache ShenYu Admin, where the incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. Recommendations: For versions 2.3.0 and 2.4.0...

9.8CVSS9.3AI score0.41851EPSS
SaveExploits2References19
Rows per page
Query Builder