CVE-2022-42735: Improper Privilege Management

February 15, 2023 (updated November 7, 2023)

Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .

References

github.com/advisories/GHSA-vf8h-2wwj-jq22
github.com/apache/shenyu/pull/3958
lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7
nvd.nist.gov/vuln/detail/CVE-2022-42735

Code Behaviors & Features

Detect and mitigate CVE-2022-42735 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →