org.apache.shiro:shiro-web
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Shiro's "remember me" cookie age is not verified on the server. | org.apache.shiro:shiro-coreorg.apache.shiro:shiro-web | MavenRed Hat | Low | Fix reported | |
| Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute | org.apache.shiro:shiro-webRed Hat Fuse 7/shiro-web | MavenRed Hat | Medium | Fix reported | |
| Open redirect in Apache Shiro | org.apache.shiro:shiro-webRed Hat Fuse 7/shiro | MavenRed Hat | Medium | Fix reported | |
| Path Traversal in Apache Shiro | org.apache.shiro:shiro-web | Maven | Critical | Fix reported | |
| Authentication bypass in Apache Shiro | org.apache.shiro:shiro-spring-boot-starterorg.apache.shiro:shiro-spring | MavenRed Hat | Critical | Fix reported | |
| Improper Access Control in Apache Shiro | org.apache.shiro:shiro-allorg.apache.shiro:shiro-web | MavenRed Hat | High | Fix reported |