Shiro@* Security Vulnerabilities and Issues — Shiro@* CVE List

Lucene search

ApacheShiro*

2 matches found

CVE•added 2022/10/12 7:15 a.m.•117 views

CVE-2022-40664

Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.

9.8CVSS9.4AI score0.00484EPSS

CVE•added 2022/06/29 12:15 a.m.•112 views

CVE-2022-32532

Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with . in the regular expression are possibly vulnerable to an authorization bypass.

9.8CVSS9.4AI score0.78425EPSS