Junglewise Threat Intelligence

CVE-2021-41303: Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass

CVE-2021-41303 · Severity: low · CVSS 3.1 · Published 2021-09-20

Technologies: org.apache.shiro:shiro-core (Maven). Vendors: Maven.

Executive brief

Apache Shiro vulnerable to a specially crafted HTTP request causing an authentication bypass

Affected products

  • Maven org.apache.shiro:shiro-core

Related threats