Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-x96m-rh44-vgv8
  • Maven/org.apache.shiro:shiro-core
Apache Shiro: LDAP DN Injection in DefaultLdapRealm 17 Jun
  • Fix available
  • Severity - 8.8 (High)
GHSA-fcvm-3cpj-f9qx
  • Maven/org.apache.shiro:shiro-core
Apache Shiro has a session fixation vulnerability 26 May
  • Fix available
  • Severity - 5.9 (Medium)
GHSA-c4qc-4q9p-m9q9
  • Maven/org.apache.shiro:shiro-core
Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability 10 Feb
  • Fix available
  • Severity - 1.0 (Low)
GHSA-jc7h-c423-mpjc
  • Maven/org.apache.shiro:shiro-core
Apache Shiro vulnerable to path traversal 15 Jan 2024
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-45x9-q6vj-cqgq
  • Maven/org.apache.shiro:shiro-core
Apache Shiro Authentication Bypass vulnerability 12 Oct 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-4cf5-xmhp-3xj7
  • Maven/org.apache.shiro:shiro-core
Improper Authorization in Apache Shiro 30 Jun 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-p836-389h-j692
  • Maven/org.apache.shiro:shiro-core
Improper Access Control in Apache Shiro 14 May 2022
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-f6jp-j6w3-w9hm
  • Maven/org.apache.shiro:shiro-core
Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass 20 Sep 2021
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-2vgm-wxr3-6w2j
  • Maven/org.apache.shiro:shiro-core
Authentication bypass in Apache Shiro 07 May 2021
  • Fix available
  • Severity - 7.5 (High)
GHSA-26gr-cvq3-qxgf
  • Maven/org.apache.shiro:shiro-core
Improper Authentication in Apache Shiro 07 May 2021
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-72w9-fcj5-3fcg
  • Maven/org.apache.shiro:shiro-core
Improper Authentication in Apache Shiro 07 May 2021
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-r679-m633-g7wc
  • Maven/org.apache.shiro:shiro-core
Improper input validation in Apache Shiro 04 Feb 2020
  • Fix available
  • Severity - 7.5 (High)