-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.shiro:shiro-root | maven | < 1.1.0 | 1.1.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing path canonicalization before security rule evaluation. PathMatchingFilterChainResolver is directly responsible for matching request paths to security constraints, while WebUtils.getPathWithinApplication provides the unnormalized path. These functions form the core of the vulnerable path evaluation process. The CVE description explicitly mentions missing canonicalization during URI comparison, which aligns with these components' responsibilities in path processing.