{"metadata": {"vulnerability": "CVE-2020-17523", "count": 29, "kinds": {"milestone": 5, "sighting": 7, "kev": 0, "other": 17}}, "data": [{"timestamp": "2020-08-12T00:00:00Z", "date_only": false, "value": "2020-08-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-17523", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-03T00:00:00Z", "date_only": true, "value": "2021-02-03", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.gitlab.com.advisories.2.pubdate"}, {"timestamp": "2021-02-03T16:55:18Z", "date_only": false, "value": "2021-02-03T16:55:18.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-17523", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-03T17:15:00Z", "date_only": false, "value": "2021-02-03T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V98J-7CRC-WVRJ", "record": "GHSA-V98J-7CRC-WVRJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-03T17:15:00Z", "date_only": false, "value": "2021-02-03T17:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-17523", "record": "UBUNTU-CVE-2020-17523", "field": "published"}, {"timestamp": "2021-02-03T17:15:00Z", "date_only": false, "value": "2021-02-03T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-03T17:15:13.700Z", "date_only": false, "value": "2021-02-03T17:15:13.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17523", "record": "FKIE_CVE-2020-17523", "field": "published"}, {"timestamp": "2021-02-05T00:00:00Z", "date_only": true, "value": "2021-02-05", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-09492", "record": "CNVD-2021-09492", "field": "submitTime"}, {"timestamp": "2021-02-05T17:20:22Z", "date_only": false, "value": "2021-02-05T17:20:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/408", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "e412ae9b-2af1-4e32-bdb0-533d550a6dd3", "content": "CVE-2020-17523 Apache Shiro authentication bypass analysis\n\n#InfoSec #CyberSecurity #Shiro #ApacheShiro #CVE-2020-17523 #Vulnerability\n#VulnerabilityAnalysis\n\nhttps://upurl.me/wj7w7", "url": "https://t.me/reconshell/408"}, {"timestamp": "2021-02-06T00:00:00Z", "date_only": true, "value": "2021-02-06", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-09492", "record": "CNVD-2021-09492", "field": "openTime"}, {"timestamp": "2021-04-25T08:04:48Z", "date_only": false, "value": "2021-04-25T08:04:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reconshell/695", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "959c5520-10f7-4c42-8d5b-f9304fef24f9", "content": "CVE-2020-17523\n\nApache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.\n\nhttps://cve.reconshell.com/cve/CVE-2020-17523", "url": "https://t.me/reconshell/695"}, {"timestamp": "2021-05-05T02:06:26Z", "date_only": false, "value": "2021-05-05T02:06:26.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2020-17523", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-07-21T00:00:00Z", "date_only": true, "value": "2021-07-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.gitlab.com.advisories.2.date"}, {"timestamp": "2021-09-21T06:42:55Z", "date_only": false, "value": "2021-09-21T06:42:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/15", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "95e8e2e0-1e90-4874-b0e2-5a08f773db3e", "content": "CVE-2020-17523 Apache Shiro pathMatches \u8eab\u4efd\u8a8d\u8b49\u7e5e\u904e\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-17523_Apache_Shiro_pathMatches_%E8%BA%AB%E4%BB%BD%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/15"}, {"timestamp": "2022-01-09T19:07:40Z", "date_only": false, "value": "2022-01-09T19:07:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2650", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "bea49b55-210f-4aac-a6a6-3143550b4c0a", "content": "#exploit\nCVE-2020-17523:\nApache Shiro pathMatches Authentication Bypass\n\ncondition: Shiro with Spring\n\n/admin/[space] \n/admin/%20\n\nPoC:\ncurl -v http://[Vimtim]/admin/%20/\nhttps://github.com/jweny/shiro-cve-2020-17523", "url": "https://t.me/CyberSecurityTechnologies/2650"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": true, "value": "2022-02-09", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": true, "value": "2022-02-09", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-02-09T22:03:57Z", "date_only": false, "value": "2022-02-09T22:03:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V98J-7CRC-WVRJ", "record": "GHSA-V98J-7CRC-WVRJ", "field": "published"}, {"timestamp": "2022-02-09T22:03:57Z", "date_only": false, "value": "2022-02-09T22:03:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V98J-7CRC-WVRJ", "record": "GHSA-V98J-7CRC-WVRJ", "field": "modified"}, {"timestamp": "2022-02-22T10:16:00Z", "date_only": false, "value": "2022-02-22T10:16Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:21:50.118Z", "date_only": false, "value": "2023-12-13T01:21:50.118305Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-17523", "record": "GSD-2020-17523", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-22T06:15:17Z", "date_only": false, "value": "2024-05-22T06:15:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "2ee14a09-acf0-4aea-9fff-b8be69ca526c", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid <=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "url": "https://t.me/CyberSecurityTechnologies/2661"}, {"timestamp": "2024-08-04T14:00:48.826Z", "date_only": false, "value": "2024-08-04T14:00:48.826Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-17523", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T14:00:48.826Z", "date_only": false, "value": "2024-08-04T14:00:48.826Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-17523", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-15T14:07:34Z", "date_only": false, "value": "2024-10-15T14:07:34Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-17523", "record": "UBUNTU-CVE-2020-17523", "field": "modified"}, {"timestamp": "2025-06-23T15:53:43Z", "date_only": false, "value": "2025-06-23T15:53:43Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-17523", "record": "UBUNTU-CVE-2020-17523", "field": "withdrawn"}, {"timestamp": "2026-06-17T02:59:04.707Z", "date_only": false, "value": "2026-06-17T02:59:04.707", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17523", "record": "FKIE_CVE-2020-17523", "field": "lastModified"}, {"timestamp": "2026-08-02T15:16:03.485Z", "date_only": false, "value": "2026-08-02T15:16:03.485383Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H-YQitL04pzj8CdPYBf4722WfUW4npbibILoDzDdy6lvQA", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "e92fb462-88d0-47f0-9122-054b45f26e1d"}, {"timestamp": "2026-08-03T02:05:52.595Z", "date_only": false, "value": "2026-08-03T02:05:52.595716Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H-YQitL04pzj8CdPYBf4722WfUW4npbibILoDzDdy6lvQA", "record": "CVE-2020-17523", "field": "creation_timestamp", "uuid": "400ed414-170f-4a6a-a0a2-86743f4c5d6d"}]}