Launchpad.net

CVE 2022-40664

Apache Shiro before 1.10.0, Authentication Bypass Vulnerability in Shiro when forwarding or including via RequestDispatcher.

See the CVE page on Mitre.org for more details.