.. / CVE-2021-37580

• Auth Bypass
• Nuclei
• Web

Exploit for Apache ShenYu Admin JWT - Authentication Bypass (CVE-2021-37580)

Description:

Apache ShenYu 2.3.0 and 2.4.0 allow Admin access without proper authentication. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication.

Nuclei Template

View the template here CVE-2021-37580.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-37580.yaml

References: