MEDIUM 6.1 Maven
Open redirect in Apache Shiro
GHSA-hhw5-c326-822h · CVE-2023-46750
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro.
Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
References
- ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2023-46750
- WEB https://github.com/apache/shiro/commit/3b80f5c8e5a95ba31e92e4825ecc0ba3148b555a
- WEB https://github.com/apache/shiro/commit/8400d08d5eac0bc4fae99d28c5adc82dd8a86eda
- PACKAGE https://github.com/apache/shiro
- WEB https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9
- WEB https://security.netapp.com/advisory/ntap-20240808-0002
- WEB https://security.netapp.com/advisory/ntap-20241108-0002
Ready to move
Start Securing
Free, no credit card | First findings in minutes