Package · Maven

org.apache.shiro:shiro-spring

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2020-17523 Public exploit EPSS 86%

Authentication bypass in Apache Shiro

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

org.apache.shiro:shiro-web org.apache.shiro:shiro-spring org.apache.shiro:shiro-spring-boot-starter Maven

Feb 3, 2021