org.apache.shenyu:shenyu-common@2.4.0 vulnerabilities
latest version
2.6.1
latest non vulnerable version
first published
3 years ago
latest version published
11 months ago
licenses detected
- [2.4.0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.apache.shenyu:shenyu-common package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the Note: This is only exploitable if the HTTP method, cookies, IP address, and headers are under the attacker's control. How to fix Server-side Request Forgery (SSRF)? Upgrade | [,2.6.0) |
Affected versions of this package are vulnerable to Improper Authentication during gateway registration. This may allow any user to register as the gateway. How to fix Improper Authentication? Upgrade | [2.4.0,2.4.2) |
Affected versions of this package are vulnerable to Access Restriction Bypass due to missing authentication on ShenYu Admin, which allows leakage of user passwords in HTTP responses. How to fix Access Restriction Bypass? Upgrade | [,2.4.2) |