CVEs-PoC/2022/CVE-2022-23944.md

CVE-2022-23944

Description

User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/Goby
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/HimmelAward/Goby_POC
• https://github.com/NyxAzrael/Goby_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/xinyisleep/pocscan