Lucene search

K
osvGoogleOSV:GHSA-7CJ4-GJ8M-M2F7
HistoryApr 22, 2021 - 4:13 p.m.

Authentication bypass in Apache Shiro

2021-04-2216:13:23
Google
osv.dev
9

0.023 Low

EPSS

Percentile

89.7%

Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

References