shiro vulnerabilities (Debian)
23 vulnerabilities.
-
shiroDebian Apache Shiro: Server-side POST request may be steered to an alternate host 5.9 Medium -
shiroDebian Apache Shiro: Authentication bypass in Guice-Web integration 8.2 High -
shiroDebian Apache Shiro: Remember-me cookie isn't checked for expiry on the server 2.0 Low -
shiroDebian Apache Shiro: LDAP DN Injection in DefaultLdapRealm 8.8 High -
shiroDebian Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default 5.9 Medium -
shiroDebian Apache Shiro: Session fixation: new session is not created after login by default 5.9 Medium -
shiroDebian Apache Shiro: Brute force attack possible to determine valid user names 1.0 Low -
shiroDebian Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems 5.3 Medium -
shiroDebian Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting 6.5 Medium -
shiroDebian Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro. 6.1 Medium -
shiroDebian Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests. 9.8 Critical -
shiroDebian Apache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP request 7.5 High -
shiroDebian Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher 9.8 Critical -
shiroDebian Authentication Bypass Vulnerability 9.8 Critical -
shiroDebian Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass 9.8 Critical -
shiroDebian Authentication bypass in Apache Shiro 9.8 Critical -
shiroDebian Authentication bypass in Apache Shiro 7.5 High -
shiroDebian Improper Authentication in Apache Shiro 9.8 Critical -
shiroDebian Improper Authentication in Apache Shiro 9.8 Critical -
shiroDebian Improper input validation in Apache Shiro 7.5 High -
shiroDebian Improper Access Control in Apache Shiro 7.5 High -
shiroDebian Improper Access Control in Apache Shiro 9.8 Critical -
shiroDebian Apache Shiro 1.x before 1.2.3, when using an LDAP server with unauthenticated bind enabled,... 7.5 High