What is GHSA-7wq4-89xx-g62j?

GHSA-7wq4-89xx-g62j is a security advisory published by GitHub Security Advisories with High severity. Password exposure in ShenYu

Which CVE IDs does GHSA-7wq4-89xx-g62j cover?

GHSA-7wq4-89xx-g62j covers the following CVE IDs: CVE-2022-23223. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7wq4-89xx-g62j?

GHSA-7wq4-89xx-g62j has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-7wq4-89xx-g62j?

GHSA-7wq4-89xx-g62j affects 1 product, including: maven/org.apache.shenyu:shenyu-common:\u003e= 2.4.0, \u003c 2.4.2.

GHSA-7wq4-89xx-g62jHighCVSS 7.5

Password exposure in ShenYu

Vendor

GitHub Security Advisories

Published

January 28, 2022

Last Modified

October 4, 2023

🔗 CVE IDs covered (1)

CVE-2022-23223 →

📋 Description

On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

🎯 Affected products1

maven/org.apache.shenyu:shenyu-common:>= 2.4.0, < 2.4.2

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2022-23223
https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s
http://www.openwall.com/lists/oss-security/2022/01/25/7
https://github.com/apache/incubator-shenyu/releases/tag/v2.4.2
http://www.openwall.com/lists/oss-security/2022/01/26/4
https://github.com/apache/shenyu/pull/2357
https://github.com/apache/shenyu/commit/0e826ceae97a1258cb15c73a3072118c920e8654
https://github.com/advisories/GHSA-7wq4-89xx-g62j