Описание
Improper Authentication in Apache ShenYu Admin
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0.
Ссылки
Пакеты
Наименование
org.apache.shenyu:shenyu-admin
maven
Затронутые версииВерсия исправления
>= 2.3.0, < 2.4.1
2.4.1
Связанные уязвимости
CVSS3: 9.8
nvd
около 4 лет назад
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0