CVE-2020-1957: shiro: Spring dynamic controllers, a specially crafted request may cause an authentication bypass

Severity: Critical

CVSS Score: 9.8

Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.