GHSA-fjjw-82xw-vfc2
Apache ShenYu Admin has insecure permissions
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.shenyu:shenyu-common | >= 2.4.2, < 2.5.0 | 2.5.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
Apache ShenYu Admin has insecure permissions, which may allow low-privilege administrators to modify high-privilege administrator's passwords. This issue affects Apache ShenYu 2.4.2 and 2.4.3. Version 2.5.0 contains a patch for this issue.
References
External links from the advisory. They lead to third-party sites.