Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-32532

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4cf5-xmhp-3xj7

Improper Authorization in Apache Shiro Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

gitlab/maven/org.apache.shiro/shiro-all/CVE-2022-32532

Incorrect Authorization Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

gitlab/maven/org.apache.shiro/shiro-core/CVE-2022-32532

Incorrect Authorization Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

gitlab/maven/org.apache.shiro/shiro-spring-boot-web-starter/CVE-2022-32532

Incorrect Authorization Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.

gitlab/maven/org.apache.shiro/shiro-web/CVE-2022-32532

Incorrect Authorization Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.