[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faQz-jKsE2T89SQw5snLiFTtPcvhkrYFn5Xw7hdstThY":3,"g5a-risk:CVE-2020-17523":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":77,"weaknesses":78,"weaknessesCount":48,"isActivelyExploited":87,"cisaInfo":26,"otxData":26,"relatedBlogPosts":88,"seoMetadata":89,"configurations":114,"relatedVendorCves":123,"notableEvents":124},"CVE-2020-17523","What is CVE-2020-17523?","Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.","2021-02-03T17:15:13.7","2023-11-07T03:19:13.02",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:C","PARTIAL","COMPLETE",9,10,8.5,0.85911,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","shiro","*","cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",1,[50,54,57,60,63,66,71,74],{"url":51,"source":52,"tags":53},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr5b93ddf97e2c4cda779d22fab30539bdec454cfa5baec4ad0ffae235%40%3Cgitbox.activemq.apache.org%3E","Apache",[],{"url":55,"source":52,"tags":56},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr679ca97813384bdb1a4c087810ba44d9ad9c7c11583979bb7481d196%40%3Cdev.shiro.apache.org%3E",[],{"url":58,"source":52,"tags":59},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",[],{"url":61,"source":52,"tags":62},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr852971e28f54cafa7d325bd7033115c67d613b112a2a1076817390ac%40%3Cdev.shiro.apache.org%3E",[],{"url":64,"source":52,"tags":65},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr9d93dfb5df016b1a71a808486bc8f9fbafebbdbc8533625f91253f1d%40%3Cdev.shiro.apache.org%3E",[],{"url":67,"source":52,"tags":68},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frce5943430a6136d37a1f2fc201d245fe094e2727a0bc27e3b2d43a39%40%3Cdev.shiro.apache.org%3E",[69,70],"Mailing List","Vendor Advisory",{"url":72,"source":52,"tags":73},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd4b613e121438b97e3eb263cac3137caddb1dbd8f648b73a4f1898a6%40%3Cissues.activemq.apache.org%3E",[],{"url":75,"source":52,"tags":76},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre25b8317b00a50272a7252c4552cf1a81a97984cc2111ef7728e48e0%40%3Cdev.shiro.apache.org%3E",[],8,[79],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":90,"metaDescription":91,"keywords":92,"canonicalUrl":93,"structuredData":94},"What is CVE-2020-17523? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-17523, a critical severity cyber security vulnerability from 2021. High exploit probability (85.9%). Apache Shiro before 1...","CVE-2020-17523, CVE-2020-17523 vulnerability, CVE-2020-17523 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, shiro vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2020-17523",{"@context":95,"@type":96,"headline":90,"description":91,"datePublished":9,"dateModified":10,"author":97,"publisher":101,"about":105,"mainEntityOfPage":109,"articleSection":112,"keywords":113},"https:\u002F\u002Fschema.org","TechArticle",{"@type":98,"name":99,"url":100},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":98,"name":99,"url":100,"logo":102},{"@type":103,"url":104},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":106,"name":6,"description":107,"additionalType":108},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":110,"@id":111},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-17523","Cybersecurity","CVE-2020-17523, CVE-2020-17523 vulnerability, CVE-2020-17523 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[115],{"Operator":26,"Negate":26,"Nodes":116},[117],{"Operator":118,"Negate":26,"CPEMatch":119},"OR",[120],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":122,"VersionEndIncluding":26},"46186C0D-DE5D-4D2B-8E29-7260BF095460","1.7.1",[],[],{"lastModified":10,"cacheTime":126,"version":32},1792372732896,{"score":128,"band":129,"action":130,"scoredAt":131},72,"High","Patch now","2026-10-16T06:50:24.011609+00:00"]