Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2021-41303

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

CVSS 3.1 · 9.8 Critical EPSS 76.1% KEV · Not listed
Vendors
Apache Oracle
Products
Shiro Financial Services Crime And Compliance Management Studio
CVE-2020-1957

shiro: Spring dynamic controllers, a specially crafted request may cause an authentication bypass

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 23.3% KEV · Not listed
Vendors
Apache Debian
Products
Shiro Debian Linux
CVE-2020-17523

shiro: Authentication bypass through specially crafted HTTP request

Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 85.9% KEV · Not listed
Vendors
Apache
Products
Shiro
CVE-2020-17510

shiro: specially crafted HTTP request may cause an authentication bypass

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 8.0% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Shiro Debian Linux Jboss Fuse
CVE-2020-13933

shiro: specially crafted HTTP request may cause an authentication bypass

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

CVSS 3.1 · 7.5 High EPSS 44.4% KEV · Not listed
Vendors
Apache Debian Redhat
Products
Shiro Debian Linux Jboss Amq and 1 more
CVE-2020-11989

shiro: spring dynamic controllers, a specially crafted request may cause an authentication bypass

Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

CVSS 3.1 · 9.8 Critical EPSS 24.4% KEV · Not listed
Vendors
Apache Redhat
Products
Shiro Jboss Fuse
CVE-2019-12422

shiro: Cookie padding oracle vulnerability with default configuration

Apache Shiro before 1.4.2, when using the default "remember me" configuration, cookies could be susceptible to a padding attack.

CVSS 3.1 · 7.5 High EPSS 9.1% KEV · Not listed
Vendors
Apache Redhat
Products
Shiro Jboss Fuse