cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: OSV:GHSA-V98J-7CRC-WVRJ...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: GHSA-V98J-7CRC-WVRJ...

cc.eamon.open:auth (0.0.2), cn.easyproject:easyshiro-redis-cache (2.6.0-release) +567 more potentially affected by CVE-2020-17510 via org.apache.shiro:shiro-spring (>=1.0.0-incubating, <=1.6.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationimpl 1.0-release - cn.org.awcp:awcp-metadesigner-applicationimpl 1.0-release - cn.org.awcp:awcp-unit-application 1.0-release and more Source cves: CVE-2020-17510...

cc.eamon.open:auth (0.0.2), cn.easyproject:easyshiro-redis-cache (2.6.0-release) +567 more potentially affected by CVE-2020-17510 via org.apache.shiro:shiro-spring (>=1.0.0-incubating, <=1.6.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationimpl 1.0-release - cn.org.awcp:awcp-metadesigner-applicationimpl 1.0-release - cn.org.awcp:awcp-unit-application 1.0-release and more Source cves: CVE-2020-17510...

cc.eamon.open:auth (0.0.2), cn.acooly:acooly-auth-wechat-authenticator (>=5.2.1, <=5.2.2) +623 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring (>=1.0.0-incubating, <=1.7.0)

org.apache.shiro:shiro-spring MAVEN version =1.0.0-incubating, =5.2.1, =1.0.0, =1.0, =1.0, =1.0.0, =1.0.4 - cn.org.awcp:awcp-formdesigner-applicationimpl 1.0-release and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...

cn.iisme.cloud:iisme-demos-shiro-web (1.0.1), cn.iisme.cloud:iisme-starter-shiro (1.0.1) +69 more potentially affected by CVE-2020-17523 via org.apache.shiro:shiro-spring-boot-starter (>=1.4.0-rc2, <=1.7.0)

org.apache.shiro:shiro-spring-boot-starter MAVEN version =1.4.0-rc2, =1.1.1, =0.0.6, =0.0.6, =2.1.1, =2.0.4-rc1, =2.2.0, =2.2.0, =1.0.0, =1.0.1 and more Source cves: CVE-2020-17523 Source advisory: MEND:CVE-2020-17523...

Authentication Bypass

shiro-spring-boot-web-starter is vulnerable to authentication bypass. An attacker is able to bypass authentication via a malicious HTTP request...