CVE-2021-37580

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affe...

Original description

The description as published by the source.

A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

References

advisory openwall.com
advisory lists.apache.org