CVE-2022-23223CWE-522

Apache ShenYu Password leakage

published January 25, 2022

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04306 · 91.1th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2022-01-25T13:00Z
EPSS history
Timeline
  • 25 JAN 13:00Z
    Apache ShenYu Password leakage
    cvelistv5