Authentication Bypass vulnerability

[S2eTo]

The shiro version used by LuckyFrameWeb is 1.5.0. The shiro configuration has bypass rules

com.luckyframe.framework.config.ShiroConfig#shiroFilterFactoryBean

Normal access, response status 302

Use /..;/ to bypass