Vulnerability Details CVE-2022-23223
On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.035
EPSS Ranking 87.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://www.openwall.com/lists/oss-security/2022/01/25/7
- http://www.openwall.com/lists/oss-security/2022/01/26/4
- https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s
- http://www.openwall.com/lists/oss-security/2022/01/25/7
- http://www.openwall.com/lists/oss-security/2022/01/26/4
- https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s