[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7cHotVHP-Z2Fd0IC12DD0TykgiDY9MOoUD-jB_UUoyg":3,"g5a-risk:CVE-2021-41303":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":77,"weaknesses":78,"weaknessesCount":87,"isActivelyExploited":88,"cisaInfo":27,"otxData":27,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":132,"notableEvents":133},"CVE-2021-41303","What is CVE-2021-41303?","Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.","Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update...","2021-09-17T09:15:09.267","2023-11-07T03:38:55.27",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.7613,[39,39,39,39,39,39,39],"Critical",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","shiro","*","cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"oracle","financial_services_crime_and_compliance_management_studio","8.0.8.2.0","cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"8.0.8.3.0","cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*",3,[58,62,67,72],{"url":59,"source":60,"tags":61},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fraae98bb934e4bde304465896ea02d9798e257e486d04a42221e2c41b%40%3Cuser.shiro.apache.org%3E","Apache",[],{"url":63,"source":60,"tags":64},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fre470be1ffea44bca28ccb0e67a4cf5d744e2d2b981d00fdbbf5abc13%40%3Cannounce.shiro.apache.org%3E",[65,66],"Mailing List","Vendor Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20220609-0001\u002F","Netapp",[71],"Third Party Advisory",{"url":73,"source":74,"tags":75},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2022.html","Oracle",[76,71],"Patch",4,[79],{"id":80,"name":81,"description":82,"extendedDescription":83,"status":84,"abstraction":85,"structure":86},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2021-41303? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-41303, a critical severity cyber security vulnerability from 2021. High exploit probability (76.1%). Apache Shiro before 1...","CVE-2021-41303, CVE-2021-41303 vulnerability, CVE-2021-41303 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, oracle security, shiro vulnerability, financial_services_crime_and_compliance_management_studio vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-41303",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-41303","Cybersecurity","CVE-2021-41303, CVE-2021-41303 vulnerability, CVE-2021-41303 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116,124],{"Operator":27,"Negate":27,"Nodes":117},[118],{"Operator":119,"Negate":27,"CPEMatch":120},"OR",[121],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":123,"VersionEndIncluding":27},"D7F4D89B-0E8C-4E16-A002-FD7EBCF57844","1.8.0",{"Operator":27,"Negate":27,"Nodes":125},[126],{"Operator":119,"Negate":27,"CPEMatch":127},[128,130],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"55F091C7-0869-4FD6-AC73-DA697D990304",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4D134C60-F9E2-46C2-8466-DB90AD98439E",[],[134,141],{"id":135,"eventType":136,"eventTime":137,"details":138,"label":139,"color":140},"0801a27f-748b-44e5-82fb-3d68381513f5","HIGH_EPSS_DELTA","2025-11-19T04:05:54.263666+00:00","Daily EPSS score increased by 0.400 on 2023-12-30","EPSS Score Increased","red",{"id":142,"eventType":143,"eventTime":144,"details":145,"label":146,"color":147},"8fa75de2-9a71-4a4e-aeb0-a92cf16d3352","LOW_EPSS_DELTA","2025-11-22T04:05:42.860314+00:00","Daily EPSS score decreased by 0.400 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":149,"version":33},1792266146545,{"score":151,"band":152,"action":153,"scoredAt":154},67,"Medium","Plan remediation","2026-10-16T06:52:05.57175+00:00"]