CVE-2010-3863
Apache Shiro < 1.1.0 and JSecurity 0.9.x - Path Traversal via URI Path Bypass
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3863. PoCs published by Luke Taylor, sh1inroot-alt.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Apache Shiro 1.0.0 by sending a crafted HTTP GET request to access sensitive files. The vulnerability arises from insufficient input sanitization, allowing path traversal sequences.
Description
Apache Shiro before 1.1.0, and JSecurity 0.9.x, does not canonicalize URI paths before comparing them to entries in the shiro.ini file, which allows remote attackers to bypass intended access restrictions via a crafted request, as demonstrated by the /./account/index.jsp URI.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in Apache Shiro 1.0.0 by sending a crafted HTTP GET request to access sensitive files. The vulnerability arises from insufficient input sanitization, allowing path traversal sequences.
The repository contains a YAML-based scanner for detecting CVE-2010-3863, a path traversal vulnerability in Apache Shiro. It checks for the presence of the '/./admin/' path and verifies the response contains 'Account Info'.