com.linecorp.centraldogma:centraldogma-server-auth-shiro
Maven2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting com.linecorp.centraldogma:centraldogma-server-auth-shiropage 1 of 1
- CVE-2025-11222MEDIUMCVSS 6.1EG 6.1fixed in 0.78.02025-12-04
vulnerable: 0.33.0 ... 0.77.4 (116 versions)
Central Dogma versions before 0.78.0 contain an Open Redirect vulnerability that allows attackers to redirect users to untrusted sites via specially crafted URLs, potentially facilitating phishing attacks and credential theft.
- CVE-2026-11748MEDIUMCVSS 6.9EG 6.9fixed in 0.84.02026-06-22
vulnerable: 0.33.0 ... 0.83.0 (125 versions)
A vulnerability has been identified in centraldogma-server-auth-shiro versions prior to 0.84.0, where the SearchFirstActiveDirectoryRealm substitutes the login username into an LDAP search filter without neutralizing LDAP filter metacharac…
Check whether com.linecorp.centraldogma:centraldogma-server-auth-shiro is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for com.linecorp.centraldogma:centraldogma-server-auth-shiro CVEs against the assets you own.
Book a Demo →