jweny/shiro-cve-2020-17523

PoC

shiro-cve-2020-17523 漏洞的两种绕过姿势分析以及配套的漏洞环境

view exploit source poc_in_githubauthor jwenypublished 2021-02-03catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-17523US	critical9.8	85.9% (100th)	Exploit	2021-02-03
Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.