apache shiro CVE-2020-11989 is a vulnerability in Apache Shiro
Published on June 22, 2020

Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.

NVD


Products Associated with CVE-2020-11989

Want to know whenever a new CVE is published for Apache Shiro? stack.watch will email you.

Apache Shiro
 

Affected Versions

Apache Software Foundation Apache Shiro Version Apache Shiro 1.5.2 - 1.5.3 is affected by CVE-2020-11989

Exploit Probability

EPSS
83.79%
Percentile
99.27%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.