Apache Shiro before 3.0.1 allows session fixation via RememberMe
shiro-core and shiro-web before 3.0.1 are affected; CVSS 4.0 is 5.9, rated medium.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
shiro-core and shiro-web before 3.0.1 are affected; CVSS 4.0 is 5.9, rated medium.
Today 1.1K readers · 1.3K views · 248 reads · all time 195K views