| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.shenyu:shenyu-common | ≥ 2.4.2, < 2.5.0 | 2.5.0 |
| shenyu | = 2.4.2= 2.4.3 |
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. Version 2.5.0 contains a patch for this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free