Vulnerability GHSA-7cj4-gj8m-m2f7
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
5 years ago
April 22, 2021 at 04:13 PM UTC
Authentication bypass in Apache Shiro
1.0.0-incubating - 1.6.0
1.0.0-incubating - 1.6.0
Summary
Authentication bypass in Apache Shiro
Details
Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
8 months ago
Apache Shiro has an Authentication Bypass
1.0.0-incubating - 2.0.6 GHSA-c244-p6m5-vqj6
1.0.0-incubating - 2.0.6 GHSA-c244-p6m5-vqj6
Critical
4 years ago
Authentication bypass in Apache Shiro
1.0.0-incubating - 1.7.0 GHSA-v98j-7crc-wvrj
1.0.0-incubating - 1.7.0 GHSA-v98j-7crc-wvrj
Impacted packages
Timeline
Published
5 years ago
April 22, 2021 at 04:13 PM UTC
Fixed (1.7.0)
Unknown
Unknown
Last Modified
2 years ago
November 08, 2023 at 04:02 AM UTC