| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.shenyu:shenyu-common | ≥ 2.4.0, < 2.4.2 | 2.4.2 |
| shenyu | = 2.4.0= 2.4.1 |
User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free