Lucene search
+L

6 matches found

OSV
OSV
•added 2026/08/31 8:17 a.m.•10 views

DEBIAN-CVE-2026-58301

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

6.5CVSS5.4AI score0.0047EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/31 8:17 a.m.•9 views

CVE-2026-58301

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

6.5CVSS0.0047EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/31 7:40 a.m.•14 views

EUVD-2026-68391

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

5.9CVSS5.9AI score0.0047EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/31 7:40 a.m.•53 views

CVE-2026-58301

CVE-2026-58301 is a Server-Side Request Forgery (SSRF) vulnerability in Apache Shiro versions 2.x through 3.0.0 , specifically affecting deployments that use the Jakarta EE integration module . A low-privileged user can craft an HTTP request that causes the server to initiate a connection to an a...

6.5CVSS5.9AI score0.0047EPSS
SaveExploits0References2Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-58301

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connectio...

6.5CVSS5.6AI score0.0047EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/31 12:00 a.m.•20 views

PT-2026-83714

When Apache Shiro is used with the Jakarta EE integration module, a low-privileged user can craft an HTTP request that causes the server to initiate a connection to an attacker-controlled URL and transmit attacker-controlled data. This vulnerability affects Apache Shiro versions 2.x through 3.0.0...

5.9CVSS5.9AI score0.0047EPSS
SaveExploits0References3
Rows per page
Query Builder