CVE-2021-45029: Groovy Code Injection & SpEL Injection in Apache ShenYu 2.4.1

[Zhang Yonglun]

Description:

Groovy Code Injection & SpEL Injection which lead to Remote Code
Execution. This issue affected Apache ShenYu 2.4.0 and 2.4.1.


--

Zhang Yonglun
Apache ShenYu (Incubating)
Apache ShardingSphere