ShiroFilterFactoryBean default can bypass auth for static files
A prior CVE-2026-23903 fix did not cover manually created ShiroFilterFactoryBean instances.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
A prior CVE-2026-23903 fix did not cover manually created ShiroFilterFactoryBean instances.
Today 1.1K readers · 1.3K views · 248 reads · all time 195K views