Apache Shenyu (Incubating)
Approved changes feed: RSS · Atom
cpe:2.3:a:apache_software_foundation:apache_shenyu_(incubating):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a) |
|---|---|
| Product | Apache Shenyu (Incubating) (01e9fa2d-2217-5440-bbaf-dbeb146193c4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-26650 |
vulnerable | 2026-06-08 05:41:52.743192 |
Apache ShenYu (incubating) Regular expression denial of service
In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource exhaustion. This issue affects Apache ShenYu (incubating) 2.4.0, 2.4.1 and 2.4.2 and is fixed in 2.4.3.
Published: 2022-05-17T08:05:10.000Z
Updated: 2024-08-03T05:11:43.499Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23945 |
vulnerable | 2026-06-08 05:40:59.369913 |
Apache ShenYu missing authentication allows gateway registration
Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
Published: 2022-01-25T13:00:25.000Z
Updated: 2024-08-03T03:59:23.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23944 |
vulnerable | 2026-06-08 05:40:59.369513 |
Apache ShenYu 2.4.1 Improper access control
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
Published: 2022-01-25T13:00:24.000Z
Updated: 2024-08-03T03:59:23.263Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23223 |
vulnerable | 2026-06-08 05:40:56.629838 |
Apache ShenYu Password leakage
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Published: 2022-01-25T13:00:22.000Z
Updated: 2024-08-03T03:36:20.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45029 |
vulnerable | 2026-06-08 05:36:47.693952 |
Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection
Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
Published: 2022-01-25T13:00:21.000Z
Updated: 2024-08-04T04:32:13.478Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.