CVE-2022-23223

Description

On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

Affected Platforms

Weakness Type

CWE-522, CWE-522

References

• http://www.openwall.com/lists/oss-security/2022/01/25/7
• http://www.openwall.com/lists/oss-security/2022/01/26/4
• https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s
• http://www.openwall.com/lists/oss-security/2022/01/25/7
• http://www.openwall.com/lists/oss-security/2022/01/26/4
• https://lists.apache.org/thread/q2gg6ny6lpkph7nkrvjzqdvqpm805v8s