cc.eamon.open:auth (0.0.2), cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2) +623 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =5.2.1, =1.0.0, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationimpl 1.0-release and more Source cves: CVE-2020-17523 Source advisory: GHSA-V98J-7CRC-WVRJ...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1510 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.1, =2.1.0-release, =2.6.0-release - cn.easyproject:easyshiro-redis-cache 2.6.0-release - cn.hll520.linling:linling-app 1.2.0 and more Source cves:...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: GHSA-V98J-7CRC-WVRJ...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: OSV:GHSA-V98J-7CRC-WVRJ...

CVE-2020-17523

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-17523

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass...

CVE-2020-17523

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass...

cc.eamon.open:auth (0.0.2), cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2) +623 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =5.2.1, =1.0.0, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationimpl 1.0-release and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...

br.com.caelum.vraptor:vraptor-shiro (>=4.0.0-beta-1, <=4.0.0-rc2), br.eti.arthurgregorio:shiro-ee (>=1.0.0, <=1.5.1) +1510 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-web (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-web MAVEN version =1.0.0-incubating, =4.0.0-beta-1, =1.0.0, =0.0.2, =0.0.21, =0.0.1, =1.0.0, =5.2.1, =1.0.0, =0.1, =0.1, =0.1, =2.1.0-release, =2.6.0-release - cn.easyproject:easyshiro-redis-cache 2.6.0-release - cn.hll520.linling:linling-app 1.2.0 and more Source cves:...

CVE-2020-17523

CVE-2020-17523 : Apache Shiro before 1.7.1, when used with Spring, can be bypassed via a specially crafted HTTP request, leading to authentication bypass. The vulnerability stems from path handling and whitespace/tokenization behavior that may cause a request to bypass Shiro’s authentication chec...

CVE-2020-17523

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...