Read the docs

Jsecurity

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Jsecurity records in CISA KEV

No Jsecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jsecurity 1 record MEDIUM

Records

1 record in Jsecurity · all components

TI-2010-03670 CVE-2010-3863 · GHSA-3jx9-mgwx-4q83

Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before…

Priority MEDIUM 55

Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted r…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.54521 Published 2010-11-05 Fixed in 1.1.0 CWE-22
Open these records in search →