PT-2020-15190

Name of the Vulnerable Software and Affected Versions Apache Shiro versions prior to 1.5.2 Description The issue allows an authentication bypass when Apache Shiro is used with Spring dynamic controllers. A specially crafted request can cause this bypass. Recommendations For versions prior to 1.5....

CVE-2020-1957: Undefined Security Weakness

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass...