CVE

CVE-2022-23944

9.1

CVSS

Description

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

Attack Vector

Privileges Req.

User Interaction

apache shenyu (incubating)

Updated Oct 12, 2026View on NVD →

S4E scanner

CVE-2022-23944 Scanner

Detects 'Improper Access Control' vulnerability in Apache ShenYu affects v. 2.4.0 and 2.4.1.

Used 2.5k times · 3.4k assets checked · url

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.