CVE-2022-23223: Apache Shenyu

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

On Apache ShenYu versions 2.4.0 and 2.4.1, and endpoint existed that disclosed the passwords of all users. Users are recommended to upgrade to version 2.4.2 or later.

Affected products

• Apache Shenyu: version 2.4.0 only; version 2.4.1 only

Published 2022-01-25. Last modified 2026-06-17.