description: Apache Shiro before 1.5.3, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.
problem types: Authentication Bypass by Primary Weakness
affected:
{
product: Apache Shiro
vendor: Apache Software Foundation
versions:
status: affected, version: Apache Shiro 1.5.2 - 1.5.3
}