Missing Authentication

2022-01-2603:52:15

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

shenyu

missing authentication

vulnerability

validation

user authentication

gateway

software

EPSS

0.003

Percentile

70.3%

JSON

shenyu is vulnerable to missing authentication. The vulnerability exists due to a lack of validation in user authentication allows attackers to register for the gateway.

References

www.openwall.com/lists/oss-security/2022/01/25/6

www.openwall.com/lists/oss-security/2022/01/26/3

github.com/apache/incubator-shenyu/commit/9a02215013037e1cc8cd41f216164628a9e9e28f#diff-826222746684d5523e8eaa53c48cfc008d8e9328f9a8e4fe23907d1836512c58

github.com/apache/incubator-shenyu/pull/2723

lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s

EPSS

0.003

Percentile

70.3%

JSON

Related for VERACODE:33893