{"id":"CVE-2020-17523","published":"2021-02-03T16:55:18Z","modified":"2024-08-04T14:00:48Z","title":"Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an…","vendor":null,"product":null,"tier":"core","eol":null,"affectedVersions":[{"vendor":"n/a","product":"Apache Shiro","versions":["before 1.7.1"]}],"description":{"text":"Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is in Apache Shiro versions before 1.7.1 when it is used together with Spring, where request handling can be subverted. An attacker who sends a specially crafted HTTP request can bypass authentication.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:18:31Z"},"cvss":null,"epss":{"score":0.85911,"percentile":0.99729,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":null,"cwes":[],"references":[{"url":"https://lists.apache.org/thread.html/rce5943430a6136d37a1f2fc201d245fe094e2727a0bc27e3b2d43a39%40%3Cdev.shiro.apache.org%3E","tags":["x_refsource_MISC"]},{"url":"https://lists.apache.org/thread.html/r5b93ddf97e2c4cda779d22fab30539bdec454cfa5baec4ad0ffae235%40%3Cgitbox.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/rd4b613e121438b97e3eb263cac3137caddb1dbd8f648b73a4f1898a6%40%3Cissues.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r9d93dfb5df016b1a71a808486bc8f9fbafebbdbc8533625f91253f1d%40%3Cdev.shiro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/re25b8317b00a50272a7252c4552cf1a81a97984cc2111ef7728e48e0%40%3Cdev.shiro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r679ca97813384bdb1a4c087810ba44d9ad9c7c11583979bb7481d196%40%3Cdev.shiro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/r852971e28f54cafa7d325bd7033115c67d613b112a2a1076817390ac%40%3Cdev.shiro.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Maven","package":"org.apache.shiro:shiro-web","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"from":["GHSA-v98j-7crc-wvrj"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.shiro:shiro-spring","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"from":["GHSA-v98j-7crc-wvrj"],"provenance":"source"},{"ecosystem":"Maven","package":"org.apache.shiro:shiro-spring-boot-starter","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"from":["GHSA-v98j-7crc-wvrj"],"provenance":"source"}],"advisories":[{"id":"GHSA-v98j-7crc-wvrj","url":"https://github.com/advisories/GHSA-v98j-7crc-wvrj","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.shiro:shiro-web","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"provenance":"source","from":"GHSA"},{"id":"GHSA-v98j-7crc-wvrj","url":"https://github.com/advisories/GHSA-v98j-7crc-wvrj","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.shiro:shiro-spring","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"provenance":"source","from":"GHSA"},{"id":"GHSA-v98j-7crc-wvrj","url":"https://github.com/advisories/GHSA-v98j-7crc-wvrj","severity":"CRITICAL","ecosystem":"Maven","package":"org.apache.shiro:shiro-spring-boot-starter","vulnerableRanges":["<1.7.1"],"patched":["1.7.1"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-1197","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1197","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-02-03","earliestUrl":"https://github.com/jweny/shiro-cve-2020-17523","repos":[{"name":"jweny/shiro-cve-2020-17523","url":"https://github.com/jweny/shiro-cve-2020-17523","stars":118,"created":"2021-02-03"}]},"first":{"date":"2021-02-03","source":"PoC-in-GitHub","url":"https://github.com/jweny/shiro-cve-2020-17523"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-02-03","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-17523","provenance":"source"},{"date":"2021-02-03","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/jweny/shiro-cve-2020-17523","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":24.9,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.95,"detail":"percentile 0.9973"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2020-17510","published":"2020-11-05","fixed":"1.7.0","kev":false,"link":{"from":"CVE-2020-17510","to":"CVE-2020-17523","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.shiro:shiro-spring","fromFixed":"1.7.0","toFixed":"1.7.1","daysApart":90},{"kind":"similar","provenance":"machine","score":1.0,"basis":"same package + description similarity"}]}},{"cve":"CVE-2020-17523","published":"2021-02-03","fixed":"1.7.1","kev":false},{"cve":"CVE-2026-23903","published":"2026-02-09","fixed":"2.1.0","kev":false}],"package":"Maven:org.apache.shiro:shiro-spring"}}