Maven Org.apache.shiro:shiro-core vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Maven Org.apache.shiro:shiro-core: 1 record(s), with affected versions and fixes.

CVE-2016-4437 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-321 Jun 7, 2016

Apache Shiro Code Execution Vulnerability

Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.