Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-11989

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-72w9-fcj5-3fcg

Improper Authentication in Apache Shiro Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management. Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

gitlab/maven/org.apache.shiro/shiro-all/CVE-2020-11989

Improper Authentication When using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

gitlab/maven/org.apache.shiro/shiro-core/CVE-2020-11989

Improper Authentication in Apache Shiro Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

gitlab/maven/org.apache.shiro/shiro-web/CVE-2020-11989

Improper Authentication Apache Shiro, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.