cve/2021/CVE-2021-41303.md

CVE-2021-41303

Description

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

POC

Reference

• https://www.oracle.com/security-alerts/cpujul2022.html

Github

• https://github.com/12442RF/Learn
• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cve-scores
• https://github.com/ARPSyndicate/cvemon
• https://github.com/cyb3r-w0lf/nuclei-template-collection
• https://github.com/pen4uin/awesome-vulnerability-research
• https://github.com/pen4uin/vulnerability-research
• https://github.com/pen4uin/vulnerability-research-list