Back to bug 2107130

Who When What Removed Added
Marian Rehak 2022-07-14 12:12:57 UTC Blocks 2107131
Chess Hazlett 2022-07-20 16:36:49 UTC CC asoldano, avibelli, balejosg, bbaranow, bgeorges, bmaxwell, brian.stansberry, cdewolf, clement.escoffier, dandread, darran.lofthouse, dkreling, dosoudil, eglynn, fjuma, fmongiar, gsmet, hamadhan, iweiss, jjoyce, jnethert, krathod, lgao, lhh, lpeer, lthon, mburns, mkolesni, mosmerov, msochure, msvehla, mszynkie, nwallace, pantinor, peholase, pgallagh, pjindal, pmackay, probinso, rruss, rstancel, rsvoboda, sbiarozk, scohen, sdouglas, smaestri, spower, tom.jenkinson
Chess Hazlett 2022-07-20 22:28:24 UTC CC ataylor, jross, mokumar, rkieley
Chess Hazlett 2022-07-20 22:29:00 UTC CC ataylor, jross, mokumar, rkieley
Chess Hazlett 2022-07-20 22:31:46 UTC Depends On 2109305
Red Hat Bugzilla 2022-08-31 22:23:08 UTC CC mszynkie
Red Hat Bugzilla 2022-10-28 13:13:01 UTC CC krathod
Chess Hazlett 2023-03-15 19:34:56 UTC Doc Text Apache Shiro's RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with '.' in the regular expression are possibly
vulnerable to an authorization bypass.
Paige Jung 2023-03-15 20:08:15 UTC Doc Text Apache Shiro's RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with '.' in the regular expression are possibly
vulnerable to an authorization bypass.
A flaw was sound in Apache Shiro's RegexRequestMatcher, which can be misconfigured and bypassed on some servlet containers. Applications using RegExPatternMatcher with '.' in the regular expression are vulnerable to an authorization bypass.
Red Hat Bugzilla 2023-05-16 09:27:29 UTC CC mokumar
Red Hat Bugzilla 2023-07-07 08:31:07 UTC Assignee security-response-team nobody
Red Hat Bugzilla 2023-07-21 22:26:23 UTC CC jpavlik

Back to bug 2107130