title: Apache ShenYu 2.4.1 Groovy Code Injection & SpEL Injection
description: Groovy Code Injection & SpEL Injection which lead to Remote Code Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
product: Apache ShenYu (incubating)
vendor: Apache Software Foundation
versions:
lessThan: 2.4.2, status: affected, version: Apache ShenYu (incubating), versionType: custom
}