{"action":"Upgrade org.apache.shenyu:shenyu-common to 2.5.0 or later.","affected":[{"fixed":"2.5.0","introduced":"2.4.2"}],"component":"org.apache.shenyu:shenyu-common","cve_ids":["CVE-2022-37435"],"ecosystem":"Maven","epss":0.01341,"exploited":false,"fixed_versions":["2.5.0"],"ghsa_id":"GHSA-fjjw-82xw-vfc2","id":"tcs_01M5N8W6JZV5EGBM2J4DCTNMMY","modified_at":"2024-02-16T08:11:39.797581Z","published_at":"2022-09-02T00:01:09Z","references":["https://osv.dev/vulnerability/GHSA-fjjw-82xw-vfc2","https://nvd.nist.gov/vuln/detail/CVE-2022-37435","https://github.com/apache/shenyu/pull/3658","https://github.com/apache/shenyu/releases/tag/v2.5.0","https://lists.apache.org/thread/ndblyxr2fdrvjtgbs1bogxgv2cgk7t28"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-fjjw-82xw-vfc2","url":"https://osv.dev/vulnerability/GHSA-fjjw-82xw-vfc2"}],"summary":"Apache ShenYu Admin has insecure permissions"}