CVE-2022-42735

    Dashboard / Vulnerabilities / CVE-2022-42735

    CVE-2022-42735

    Published: 15 Feb 2023Last Modified: 28 Oct 2026

    Summary: Apache ShenYu Admin ultra vires

    Details: Improper Privilege Management vulnerability in Apache Software Foundation Apache ShenYu. ShenYu Admin allows low-privilege low-level administrators create users with higher privileges than their own. This issue affects Apache ShenYu: 2.5.0. Upgrade to Apache ShenYu 2.5.1 or apply patch https://github.com/apache/shenyu/pull/3958 https://github.com/apache/shenyu/pull/3958 .

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/42xxx/CVE-2022-42735.json, https://lists.apache.org/thread/2k8764jmckmc19qc8x51nlnngq71pcf7, https://nvd.nist.gov/vuln/detail/CVE-2022-42735

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8c4c530206e36be531fed7a323025c5cc592af2b
    Fixed -None

    Affected versions

    2.5.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-42735 | CVE-DB