Apache · Apache Shenyu · CVE-2022-42735
**Name of the Vulnerable Software and Affected Versions**
Apache ShenYu version 2.5.0
**Description**
The issue is related to Improper Privilege Management in Apache ShenYu, where ShenYu Admin allows low-privilege low-level administrators to create users with higher privileges than their own.
**Recommendations**
For Apache ShenYu version 2.5.0, upgrade to Apache ShenYu 2.5.1 or apply the provided patch.