Add CVE-2020-11989 to org.apache.shiro/shiro-spring-boot-web-starter [adbcurate]
requested to merge adbcurate/maven_org_apache_shiro_shiro_spring_boot_web_starter_CVE_2020_11989_yml into master
Useful links
-
Solr: https://search.maven.org/solrsearch/select?q=a:%22org.apache.shiro/shiro-spring-boot-web-starter
-
Mvnrepository: https://mvnrepository.com/artifact/org.apache.shiro/shiro-spring-boot-web-starter
To be checked:
-
identifier
should be the CVE id when it exists. -
description
must not contain an overview of the package, fixed versions, affected versions, solution or links. It leverages the Markdown syntax. -
date
is the date on which the advisory was made public (or updated). -
urls
must contain URLs specific to the vulnerability, not URLs generic to the package itself. -
not_impacted
lists old versions that are not impacted, if any, the fixed versions. -
solution
tells how to remediate the vulnerability. -
title
is a short description. It does not contain the package name.