Description
A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0
Remediation
References
http://www.openwall.com/lists/oss-security/2021/11/16/1
https://lists.apache.org/thread/o15j25qwtpcw62k48xw1tnv48skh3zgb
Related Vulnerabilities
CVE-2023-31101 Vulnerability in maven package org.apache.inlong:manager-service
CVE-2020-15149 Vulnerability in npm package nodebb
CVE-2021-23631 Vulnerability in npm package convert-svg-core
CVE-2019-10778 Vulnerability in npm package devcert-sanscache
CVE-2021-44550 Vulnerability in maven package edu.stanford.nlp:stanford-corenlp