cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-26650,https://securityvulnerability.io/vulnerability/CVE-2022-26650,Apache ShenYu (incubating) Regular expression denial of service,"In Apache ShenYui, ShenYu-Bootstrap, RegexPredicateJudge.java uses Pattern.matches(conditionData.getParamValue(), realData) to make judgments, where both parameters are controllable by the user. This can cause an attacker pass in malicious regular expressions and characters causing a resource exhaustion. This issue affects Apache ShenYu (incubating) 2.4.0, 2.4.1 and 2.4.2 and is fixed in 2.4.3.",Apache,Apache Shenyu (incubating),7.5,HIGH,0.0017999999690800905,false,,false,false,false,,,false,false,,2022-05-17T08:05:10.000Z,0
CVE-2022-23945,https://securityvulnerability.io/vulnerability/CVE-2022-23945,Apache ShenYu missing authentication allows gateway registration,Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.,Apache,Apache Shenyu (incubating),7.5,HIGH,0.0017300000181421638,false,,false,false,false,,,false,false,,2022-01-25T13:00:25.000Z,0
CVE-2022-23944,https://securityvulnerability.io/vulnerability/CVE-2022-23944,Apache ShenYu 2.4.1 Improper access control,User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.,Apache,Apache Shenyu (incubating),9.1,CRITICAL,0.5909299850463867,false,,false,false,false,,,false,false,,2022-01-25T13:00:24.000Z,0
CVE-2022-23223,https://securityvulnerability.io/vulnerability/CVE-2022-23223,Apache ShenYu Password leakage,"On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.",Apache,Apache Shenyu (incubating),7.5,HIGH,0.0018700000364333391,false,,false,false,false,,,false,false,,2022-01-25T13:00:22.000Z,0
CVE-2021-45029,https://securityvulnerability.io/vulnerability/CVE-2021-45029,Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection,Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.,Apache,Apache Shenyu (incubating),9.8,CRITICAL,0.004120000172406435,false,,false,false,false,,,false,false,,2022-01-25T13:00:21.000Z,0