Apache Shiro Vulnerabilities

Apache Shiro vulnerabilities.

15 January 2024

Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting
CVE-2023-46749
ApacheApache Shiro6.5MEDIUM

14 December 2023

Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.
CVE-2023-46750
ApacheApache Shiro6.1MEDIUM

24 July 2023

Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests.
CVE-2023-34478
ApacheApache Shiro9.8CRITICAL

14 January 2023

Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request
CVE-2023-22602
ApacheApache Shiro7.5HIGH

12 October 2022

Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher
CVE-2022-40664
ApacheApache Shiro9.8CRITICAL

29 June 2022

Authentication Bypass Vulnerability
CVE-2022-32532
ApacheApache Shiro👾🟡9.8CRITICAL

17 September 2021

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass
CVE-2021-41303
ApacheApache ShiroEPSS 13%9.8CRITICAL

3 February 2021

Authentication Bypass in Apache Shiro with Spring Framework
CVE-2020-17523
ApacheApache Shiro👾🟡EPSS 34%9.8CRITICAL

5 November 2020

Authentication Bypass Vulnerability in Apache Shiro with Spring
CVE-2020-17510
ApacheApache Shiro9.8CRITICAL

17 August 2020

Authentication Bypass in Apache Shiro Products by Apache
CVE-2020-13933
ApacheApache Shiro👾🟡7.5HIGH

22 June 2020

Authentication Bypass Vulnerability in Apache Shiro by Vendor
CVE-2020-11989
ApacheApache Shiro👾🟡EPSS 25%9.8CRITICAL

25 March 2020

Authentication Bypass Vulnerability in Apache Shiro by Vendor Apache
CVE-2020-1957
ApacheApache Shiro9.8CRITICAL

18 November 2019

Padding Attack Vulnerability in Apache Shiro by The Apache Software Foundation
CVE-2019-12422
ApacheShiro👾🟡7.5HIGH

20 September 2016

CVE-2016-6802
ApacheShiro7.5HIGH

7 June 2016

CVE-2016-4437
ApacheShiro👾🟡EPSS 97%🦅9.8CRITICAL

6 October 2014

CVE-2014-0074
ApacheShiro

No more vulnerabilities to load.