CVE-2022-23945

CVE-2022-23945: Apache ShenYu missing authentication allows gateway registration

Vendor Apache Software Foundation

Product Apache ShenYu (incubating)

Weakness CWE-862 · Missing authorization

Published January 25, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Key dates

02Disclosure timeline

January 25, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-23945 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/862.html AskarLabs — CWE-862 write-up Missing Authorization

Related vulnerabilities

04Related CVE

CVE-2026-66464 WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vulnerability CVE-2026-18347 Kirki <= 6.1.1 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via 'context' Parameter CVE-2026-28186 WordPress Travelfic Toolkit plugin <= 1.5.1 - Broken Access Control vulnerability CVE-2026-66455 WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability CVE-2026-28571 WordPress FormyChat plugin <= 2.15.7 - Broken Access Control vulnerability