CVE-2020-17523
Fixed upstream EPSS 86%
Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
Products: apache shiro
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.shiro:shiro-spring | 1.7.1 |
| Maven | org.apache.shiro:shiro-spring-boot-starter | 1.7.1 |
| Maven | org.apache.shiro:shiro-web | 1.7.1 |