Approved changes feed: RSS · Atom

cpe:2.3:a:apache:shenyu:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductShenyu (568c2d55-7142-5fa6-981e-8c337d6b9a17)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/shenyu purl2cpe 2026-06-01 10:14:25.154845
pkg:github/apache/incubator-shenyu purl2cpe 2026-06-01 10:14:25.154847
pkg:maven/org.apache.shenyu/shenyu purl2cpe 2026-06-01 10:14:25.154848

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42735 vulnerable 2026-06-08 05:49:30.216830 Apache ShenYu Admin ultra vires
Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .
Published: 2023-02-15T09:38:55.301Z
Updated: 2025-03-19T15:27:12.113Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.