CVE-2023-46750 — Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache…

CVE-2023-46750

Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro. PUBLISHED

Description (CNA)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Shiro	affected 0 before 1.13.0; affected 2.0.0-alpha-1 before 2.0.0-alpha-4

CWE

CWE-601

References

https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9
https://security.netapp.com/advisory/ntap-20240808-0002/
https://security.netapp.com/advisory/ntap-20241108-0002/

CISA-ADP

No English description supplied.

No references supplied.