VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 14, 2023· Updated Jun 17, 2026

CVE-2023-46750

CVE-2023-46750

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.shiro:shiro-webMaven
< 1.13.01.13.0
org.apache.shiro:shiro-webMaven
>= 2.0.0-alpha-1, < 2.0.0-alpha-42.0.0-alpha-4

Affected products

6
  • Apache/Shiro4 versions
    cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:apache:shiro:*:*:*:*:*:*:*:*range: <1.13.0
    • cpe:2.3:a:apache:shiro:2.0.0:alpha1:*:*:*:*:*:*
    • cpe:2.3:a:apache:shiro:2.0.0:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:apache:shiro:2.0.0:alpha3:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.apache.shiro/shiro-web
    Range: < 1.13.0
  • Apache Software Foundation/Apache Shirov5
    Range: 0

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.