Description

Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.

Remediation

References

http://www.securityfocus.com/bid/92947

http://packetstormsecurity.com/files/138709/Apache-Shiro-Filter-Bypass.html

http://www.securityfocus.com/archive/1/539397/100/0/threaded

Related Vulnerabilities

CVE-2022-41879 Vulnerability in npm package parse-server

CVE-2020-6463 Vulnerability in maven package org.webjars.npm:electron

CVE-2020-7676 Vulnerability in maven package org.webjars.bowergithub.angular:angular

CVE-2017-9805 Vulnerability in maven package org.apache.struts:struts2-core

CVE-2014-3741 Vulnerability in npm package printer

Severity

High

Classification

CWE-284 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory VDB Entry