VYPR
Critical severity9.8NVD Advisory· Published Sep 17, 2021· Updated Jun 17, 2026

CVE-2021-41303

CVE-2021-41303

Description

Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.shiro:shiro-coreMaven
< 1.8.01.8.0

Affected products

11

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.