Количество 3
Количество 3
CVE-2010-3863
Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI.
CVE-2010-3863
Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize ...
GHSA-3jx9-mgwx-4q83
Apache Shiro Path Traversal vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2010-3863 Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI. | CVSS2: 5 | 55% Средний | почти 16 лет назад |
| CVE-2010-3863 Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize ... | CVSS2: 5 | 55% Средний | почти 16 лет назад |
| GHSA-3jx9-mgwx-4q83 Apache Shiro Path Traversal vulnerability | 55% Средний | больше 4 лет назад |
Уязвимостей на страницу