Security Advisory

CVE-2020-11989

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-22 18:06:37
Last updated 2024-08-04 11:48:57
Assigner apache
State PUBLISHED

Description

Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.