[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLmvJJRnISbfUEJcM-C28mT9k773aRR01YDPkakkC9Iw":3,"g5a-risk:CVE-2020-1957":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":52,"references":53,"referencesCount":80,"weaknesses":81,"weaknessesCount":85,"isActivelyExploited":86,"cisaInfo":26,"otxData":26,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":128,"notableEvents":129},"CVE-2020-1957","What is CVE-2020-1957?","Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass.","2020-03-25T16:15:19.353","2023-11-07T03:19:38.213",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[30],{"Source":16,"Type":17,"CVSSData":31,"BaseSeverity":24,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":20,"AccessComplexity":21,"Authentication":22,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.23326,[38,38,38,38,38,38,38],"Critical",[42,47],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"apache","shiro","*","cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",2,[54,60,63,66,69,72,75],{"url":55,"source":56,"tags":57},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr17f371fc89d34df2d0c8131473fbc68154290e1be238895648f5a1e6%40%3Cdev.shiro.apache.org%3E","Apache",[58,59],"Mailing List","Vendor Advisory",{"url":61,"source":56,"tags":62},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr2d2612c034ab21a3a19d2132d47d3e4aa70105008dd58af62b653040%40%3Ccommits.shiro.apache.org%3E",[],{"url":64,"source":56,"tags":65},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frab1972d6b177f7b5c3dde9cfb0a40f03bca75f0eaf1d8311e5762cb3%40%3Ccommits.shiro.apache.org%3E",[],{"url":67,"source":56,"tags":68},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frb3982edf8bc8fcaa7a308e25a12d294fb4aac1f1e9d4e14fda639e77%40%3Cdev.geode.apache.org%3E",[],{"url":70,"source":56,"tags":71},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc64fb2336683feff3580c3c3a8b28e80525077621089641f2f386b63%40%3Ccommits.camel.apache.org%3E",[],{"url":73,"source":56,"tags":74},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc8b39ea8b3ef71ddc1cd74ffc866546182683c8adecf19c263fe7ac0%40%3Ccommits.shiro.apache.org%3E",[],{"url":76,"source":77,"tags":78},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F04\u002Fmsg00014.html","Debian",[58,79],"Third Party Advisory",7,[82],{"id":83,"name":83,"description":84},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2020-1957? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-1957, a critical severity cyber security vulnerability from 2020. Apache Shiro before 1.5.2, when using Apache Shiro with ...","CVE-2020-1957, CVE-2020-1957 vulnerability, CVE-2020-1957 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, apache security, debian security, shiro vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2020-1957",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":9,"dateModified":10,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-1957","Cybersecurity","CVE-2020-1957, CVE-2020-1957 vulnerability, CVE-2020-1957 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114,122],{"Operator":26,"Negate":26,"Nodes":115},[116],{"Operator":117,"Negate":26,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":121,"VersionEndIncluding":26},"E3E20335-3AB4-4B78-A749-60452E410CF9","1.5.2",{"Operator":26,"Negate":26,"Nodes":123},[124],{"Operator":117,"Negate":26,"CPEMatch":125},[126],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":127,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",[],[130],{"id":131,"eventType":132,"eventTime":133,"details":134,"label":135,"color":136},"8ebe0882-c5d6-44db-b7ea-02de0698c743","LOW_EPSS_DELTA","2026-06-16T04:05:53.760959+00:00","Daily EPSS score decreased by 0.624 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":138,"version":32},1792361951552,{"score":140,"band":141,"action":142,"scoredAt":143},56,"Medium","Plan remediation","2026-10-16T06:48:08.880925+00:00"]