CVE-2020-13933

HIGH7.5EPSS 80.9%

Authentication bypass in Apache Shiro

Published: 5/7/2021Modified: 3/15/2024
Also known as:GHSA-2vgm-wxr3-6w2jDEBIAN-CVE-2020-13933

Description

Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.

Affected packages (3)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1HIGH7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References (19)