CVE-2022-23223
Assigner: apache
Published: 2022-01-25T13:00:22
State: PUBLISHED
affected: product: Apache ShenYu (incubating) 
vendor: Apache Software Foundation
versions: lessThan: 2.4.2
status: affected
version: Apache ShenYu (incubating) 
versionType: custom
descriptions: value: On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
problemTypes: descriptions: cweId: CWE-522
description: CWE-522 Insufficiently Protected Credentials
type: CWE
source: discovery: UNKNOWN
title: Apache ShenYu Password leakage
x_generator: engine: Vulnogram 0.0.9