Security Advisory

CVE-2020-1957

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-25 15:24:27
Last updated 2024-08-04 06:54:00
Assigner apache
State PUBLISHED

Description

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.