Beveiligingsadvies

CVE-2022-32532

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-28 23:20:11
Laatst bijgewerkt 2024-08-03 07:46:43
Toegewezen door apache
CVSS-score geen score
Status PUBLISHED

Beschrijving

Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.