Apache ShenYu vulnerabilities

2 known vulnerabilities in Apache ShenYu from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Apache ShenYu: Improper Privilege Management

  CVE-2022-42735Feb 15, 2023ApacheEPSS 1.19%

  Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache S

• 8.8 High severity

  Apache ShenYu: Incorrect Permission Assignment for Critical Resource

  CVE-2022-37435Sep 1, 2022ApacheEPSS 1.34%

  Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3.