CVSS 3.1
6.1 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2023-46750
Medium (6.1) in apache shiro. EPSS 1.5% chance of exploitation in the next 30 days. Fixed in org.apache.shiro:shiro-web 1.13.0, 2.0.0-alpha-4.
URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro.
Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
Severity
- EPSS
- 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
- CWE
- CWE-601
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:shiro
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-hhw5-c326-822h | Maven | org.apache.shiro:shiro-web | <1.13.0 | 1.13.0 |
| GHSA-hhw5-c326-822h | Maven | org.apache.shiro:shiro-web | >=2.0.0-alpha-1 <2.0.0-alpha-4 | 2.0.0-alpha-4 |