CVE-2022-23945: Apache Shenyu

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Missing authentication on ShenYu Admin when register by HTTP. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Affected products

• Apache Shenyu: version 2.4.0 only; version 2.4.1 only

Published 2022-01-25. Last modified 2026-06-17.