← All advisories

High severity7.5NVD Advisory· Published Jan 25, 2022· Updated Jun 17, 2026

CVE-2022-23945

CVE-2022-23945

Description

Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.apache.shenyu:shenyu-commonMaven	>= 2.4.0, < 2.4.2	2.4.2

Affected products

2

ghsa-coords
pkg:maven/org.apache.shenyu/shenyu-common
Range: >= 2.4.0, < 2.4.2
Apache/ShenYucpe-rescue
Range: Apache ShenYu (incubating)

Patches

Vulnerability mechanics

References

7

www.openwall.com/lists/oss-security/2022/01/26/3nvdMailing ListPatchThird Party AdvisoryWEB
www.openwall.com/lists/oss-security/2022/01/25/6nvdMailing ListThird Party AdvisoryWEB
github.com/advisories/GHSA-7rjp-fgwj-47rwghsaADVISORY
lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8snvdMailing ListNot ApplicableVendor AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-23945ghsaADVISORY
github.com/apache/shenyu/commit/9a02215013037e1cc8cd41f216164628a9e9e28fghsaWEB
github.com/apache/shenyu/pull/2723ghsaWEB

News mentions

0

No linked articles in our index yet.