Apache ShenYu Password leakage
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.3%
exploitation probability
4.3%top 10% of all CVEs
observed exploitation
nono source reports it
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Affected products
Apache Software Foundation · Apache ShenYu (incubating)