Shiro-Action Incorrect Access Control Vulnerability Allowing Information Leakage

A vulnerability exists in Shiro-Action versions through 0.6, where incorrect access control in the '/user/list' component allows attackers to access sensitive information by sending a crafted payload. The vulnerability arises because the authentication checks can be bypassed, enabling unauthorized access to protected APIs.

Impact

Exploitation of this vulnerability leads to unauthorized access to sensitive information via protected APIs that require authentication.

Reproduction

To reproduce this vulnerability, send a GET request to the '/user/list' API. The request will be denied due to authentication requirements. However, by sending a payload that includes the '/images/..;/user/list' path, the authentication can be bypassed, granting access to the '/user/list' API.