title: Apache ShenYu Admin bypass JWT authentication
description: A flaw was found in Apache ShenYu Admin. The incorrect use of JWT in ShenyuAdminBootstrap allows an attacker to bypass authentication. This issue affected Apache ShenYu 2.3.0 and 2.4.0
problem types: CWE-287 Improper Authentication
affected:
{
product: Apache ShenYu Admin
vendor: Apache Software Foundation
versions:
status: affected, version: Apache ShenYu Admin 2.3.0-2.4.0
}