shiro vulnerabilities (Ubuntu)
22 vulnerabilities.
-
shiroUbuntu Apache Shiro: Server-side POST request may be steered to an alternate host 5.9 Medium -
shiroUbuntu Apache Shiro: Authentication bypass in Guice-Web integration 8.2 High -
shiroUbuntu Apache Shiro: Remember-me cookie isn't checked for expiry on the server 2.0 Low -
shiroUbuntu Apache Shiro: LDAP DN Injection in DefaultLdapRealm 8.8 High -
shiroUbuntu Apache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow 0.0 None -
shiroUbuntu Apache Shiro Jakarta EE module: Open redirect and SSRF (requires valid credentials) 5.1 Medium -
shiroUbuntu Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default 5.9 Medium -
shiroUbuntu Apache Shiro: Session fixation: new session is not created after login by default 5.9 Medium -
shiroUbuntu Apache Shiro: Brute force attack possible to determine valid user names 1.0 Low -
shiroUbuntu Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems 5.3 Medium -
shiroUbuntu Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting 6.5 Medium -
shiroUbuntu Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro. 6.1 Medium -
shiroUbuntu Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests. 9.8 Critical -
shiroUbuntu Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher 9.8 Critical -
shiroUbuntu Authentication Bypass Vulnerability 9.8 Critical -
shiroUbuntu Authentication bypass in Apache Shiro 9.8 Critical -
shiroUbuntu Authentication bypass in Apache Shiro 7.5 High -
shiroUbuntu Improper Authentication in Apache Shiro 9.8 Critical -
shiroUbuntu Improper Authentication in Apache Shiro 9.8 Critical -
shiroUbuntu Improper input validation in Apache Shiro 7.5 High -
shiroUbuntu Improper Access Control in Apache Shiro 7.5 High -
shiroUbuntu Improper Access Control in Apache Shiro 9.8 Critical