← Database

CVE-2021-41303

CRITICAL CVSS: 9.8 Published: 2021-09-17 Modified: 2026-06-17

Description

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

Affected Platforms

Oracle Financial Services Crime And Compliance Management StudioApache Shiro

Weakness Type

CWE-287, NVD-CWE-noinfo

References