CVE-2022-23223

high

Description

On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

References

https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s

http://www.openwall.com/lists/oss-security/2022/01/26/4

http://www.openwall.com/lists/oss-security/2022/01/25/7

Details

Source: Mitre, NVD

Published: 2022-01-25

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.03544

Detections

Analytics