CVE-2022-42735

Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .

Score

CVSS 3.1 8.8 High

Status

Modified - security@apache.org

Published

2023-02-15

Last modified

2025-03-19

Weaknesses

CWE-269

Affected products

• Shenyu (Apache)
• Apache Shenyu (Apache Software Foundation)

References

• https://lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7