Apache Shenyu vulnerabilities

• apache shenyu Server-Side Request Forgery in Apache ShenYu CVE-2023-25753 Fix available 6.5 MediumOctober 19, 2023
• apache shenyu Apache ShenYu Admin ultra vires CVE-2022-42735 Fix available 8.8 HighFebruary 15, 2023
• apache shenyu Apache ShenYu Admin Improper Privilege Management CVE-2022-37435 Fix available 8.8 HighSeptember 1, 2022
• apache shenyu, apache software foundation shenyu (incubating) +1 more Apache ShenYu (incubating) Regular expression denial of service CVE-2022-26650 Fix available 7.5 HighMay 17, 2022
• apache shenyu, apache software foundation shenyu (incubating) +1 more Apache ShenYu missing authentication allows gateway registration CVE-2022-23945 Fix available 7.5 HighJanuary 25, 2022
• apache shenyu, apache software foundation shenyu (incubating) +1 more Apache ShenYu 2.4.1 Improper access control CVE-2022-23944 Fix available EPSS 79.0% 9.1 CriticalJanuary 25, 2022
• apache shenyu, apache software foundation shenyu (incubating) +1 more Apache ShenYu Password leakage CVE-2022-23223 Fix available 7.5 HighJanuary 25, 2022
• apache shenyu, apache software foundation shenyu (incubating) +1 more Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection CVE-2021-45029 Fix available 9.8 CriticalJanuary 25, 2022
• apache shenyu, apache software foundation shenyu admin +1 more Apache ShenYu Admin bypass JWT authentication CVE-2021-37580 Public exploitFix available EPSS 42.1% 9.8 CriticalNovember 16, 2021