Lucene search
Veracode Vulnerability DatabaseVERACODE:33911HistoryJan 26, 2022 - 8:17 a.m.
Insecure Access Control
2022-01-2608:17:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.257 Low
EPSS
Percentile
96.7%
shenyu has insecure access control. The vulnerability exists due to a lack of validation of the user access via the /plugin api allowing an attacker to access the system without authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| shenyu-admin | le | 2.4.1 | |
| shenyu-admin | le | 2.4.1 |
Related
osv
osv
Missing authentication in ShenYu
2022-01-28 22:13:44
CVE-2022-23944
2022-01-25 13:15:08
cve
cve
CVE-2022-23944
2022-01-25 13:15:08
cvelist
cvelist
CVE-2022-23944 Apache ShenYu 2.4.1 Improper access control
2022-01-25 13:00:24
nvd
nvd
CVE-2022-23944
2022-01-25 13:15:08
cnvd
cnvd
Apache ShenYu Access Control Error Vulnerability
2022-01-27 00:00:00
nuclei
nuclei
Apache ShenYu Admin Unauth Access
2022-01-27 10:29:26
github
github
Missing authentication in ShenYu
2022-01-28 22:13:44
prion
prion
Authentication flaw
2022-01-25 13:15:00