Now, the team fixed this issue in Apache ShenYu 2.4.2. Apache ShenYu provides plugin system, which allows users to create plugins that extend functionality of Apache web server. In order to secure plugins, Apache ShenYu provides plugin system which restricts plugin installation to a specific plugin directory. However, this restriction also blocked third party plugins that are not hosted in the plugin directory. As a result, any user visiting a website with a third party plugin, could access that plugin without any authentication. Now, the team fixed this issue in Apache ShenYu 2.4.2. Apache ShenYu provides plugin system, which allows users to create plugins that extend functionality of Apache web server. In order to secure plugins, Apache ShenYu provides plugin system which restricts plugin installation to a specific plugin directory. However, this restriction also blocked third party plugins that are not hosted in the plugin directory. As a result, any user visiting a website with a third party plugin, could access that plugin without any authentication. You can upgrade your Apache ShenYu version by following the steps below. Go to Settings > Upgrade and follow the instructions.

How to install and upgrade Apache ShenYu?

1. Download the latest version of Apache ShenYu 2.4.2
2. Copy files from zip file to your current installation directory (usually it will be /var/www or /var/www/shenyu)
3. Remove the old version and restart your web server
4. Go to Settings > Upgrade which should now display the correct version

Steps to upgrade Apache ShenYu

Step 1: Log in to your server's main interface.
Step 2: Click on "Upgrades" tab and click on the "+" icon to install the upgrade.
Step 3: Click on "Upgrade Now".

Timeline

Published on: 01/25/2022 13:15:00 UTC
Last modified on: 02/01/2022 14:28:00 UTC

References