title: Apache ShenYu 2.4.1 Improper access control
description: User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
problem types: CWE-862 Missing Authorization
affected:
{
product: Apache ShenYu (incubating)
vendor: Apache Software Foundation
versions:
lessThan: 2.4.2, status: affected, version: Apache ShenYu (incubating), versionType: custom
}