What’s Vulnerable › Vulnerabilities

CVE-2022-42735: Apache ShenYu Admin ultra vires

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-15 · updated 2026-06-17
• Weakness: CWE-269

Description

Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .

Affected products

• Apache Software Foundation Apache ShenYu (incubating): 2.5.0

References

• https://lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7
• https://lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7

Get alerted when CVE-2022-42735 or the next vulnerability affects your stack