description: Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
problem types: Authentication Bypass
affected:
{
product: Apache Shiro
vendor: n/a
versions:
status: affected, version: Apache Shiro to 1.5.2
}