Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-3863 PoC — Apache Shiro路径遍历漏洞

Source
https://github.com/Threekiii/Awesome-POC/blob/master/%E4%B8%AD%E9%97%B4%E4%BB%B6%E6%BC%8F%E6%B4%9E/Apache%20Shiro%20%E8%AE%A4%E8%AF%81%E7%BB%95%E8%BF%87%E6%BC%8F%E6%B4%9E%20CVE-2010-3863.md
Associated Vulnerability
Title:Apache Shiro路径遍历漏洞 (CVE-2010-3863)
Description:Apache Shiro/Jsecurity都是强大、灵活的Java开源安全框架。 Apache Shiro 1.1.0版本，以及Jsecurity 0.9.x在执行路径匹配之前没有规范URI路径。远程攻击者可以借助特制请求绕过预设的访问限制。
File Snapshot

 # Apache Shiro 认证绕过漏洞 CVE-2010-3863

## 漏洞描述

Apache Shiro是一款开源安全框架，提供身份验证、授权、密码学和会话管理。Shiro框架直观、易用，

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.