Lucene search

K
osvGoogleOSV:CVE-2021-37580
HistoryNov 16, 2021 - 10:15 a.m.

CVE-2021-37580

2021-11-1610:15:07
Google
osv.dev
6
apache shenyu
admin
authentication

AI Score

9.3

Confidence

High

EPSS

0.876

Percentile

98.7%

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

AI Score

9.3

Confidence

High

EPSS

0.876

Percentile

98.7%