← All advisories

Critical severity9.1NVD Advisory· Published Jan 25, 2022· Updated Jun 17, 2026

CVE-2022-23944

CVE-2022-23944

Description

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.shenyu:shenyu-commonMaven	>= 2.4.0, < 2.4.2	2.4.2

Affected products

2

ghsa-coords
pkg:maven/org.apache.shenyu/shenyu-common
Range: >= 2.4.0, < 2.4.2
Apache/ShenYucpe-rescue
Range: Apache ShenYu (incubating)

Patches

Vulnerability mechanics

References

8

www.openwall.com/lists/oss-security/2022/01/26/2nvdMailing ListPatchThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2022/01/25/15nvdMailing ListThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2022/01/25/5nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-6v39-p2xq-g5c3ghsaADVISORY
lists.apache.org/thread/dbrjnnlrf80dr0f92k5r2ysfvf1kr67ynvdMailing ListVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-23944ghsaADVISORY
github.com/apache/incubator-shenyu/pull/2462ghsaWEB
github.com/apache/shenyu/pull/2462/commits/50e4b5e626ad94b415e26ef4fbe584bd51fd1b77ghsaWEB

News mentions

0

No linked articles in our index yet.