Package · Debian

shiro

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2016-4437 Exploited Public exploit EPSS 93%

Improper Access Control in Apache Shiro

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.

shiro shiro org.apache.shiro:shiro-core Debian Ubuntu Maven

Jun 7, 2016
KEV Nov 3, 2021