GitStock

apache/shiro · Security

Authentication bypass in Apache Shiro

GHSA ID
GHSA-2vgm-wxr3-6w2j
CVE ID
CVE-2020-13933
Severity
high
Published
Updated
CVSS
7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3
7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

CWEs

  • CWE-287 · Improper Authentication

References