Shiro@* Security Vulnerabilities and Issues — Shiro@* CVE List

Lucene search

ApacheShiro*

2 matches found

CVE•added 2021/02/03 5:15 p.m.•118 views

CVE-2020-17523

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

9.8CVSS9.4AI score0.88767EPSS

CVE•added 2021/09/17 9:15 a.m.•104 views

CVE-2021-41303

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

9.8CVSS9.4AI score0.57984EPSS