[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CA+ZBtZ4H7FSgb6_c8BXHUd=JesdUC914GvF0_2sUrHDsAdxVhg@mail.gmail.com>
Date: Tue, 25 Jan 2022 19:39:06 +0800
From: Zhang Yonglun <zhangyonglun@...che.org>
To: oss-security@...ts.openwall.com, dev@...nyu.apache.org
Subject: CVE-2022-23944: Apache ShenYu 2.4.1 Improper access control
Description:
User can access /plugin api without authentication. This issue
affected Apache ShenYu 2.4.0 and 2.4.1.
--
Zhang Yonglun
Apache ShenYu (Incubating)
Apache ShardingSphere
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
