Approved changes feed: RSS · Atom

cpe:2.3:a:apache:shiro:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductShiro (421a77b6-3a9e-5d21-acc6-b5c87704d612)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/shiro purl2cpe 2026-06-01 10:14:31.192971
pkg:deb/debian/shiro purl2cpe 2026-06-01 10:14:31.192972
pkg:deb/ubuntu/shiro purl2cpe 2026-06-01 10:14:31.192974
pkg:github/apache/shiro purl2cpe 2026-06-01 10:14:31.192975
pkg:maven/org.apache.shiro/shiro-core purl2cpe 2026-06-01 10:14:31.192976

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6802 vulnerable 2026-06-08 05:08:11.000404 Details available
Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet context path.
Published: 2016-09-20T19:00:00.000Z
Updated: 2024-08-06T01:43:37.909Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.