NA

CVE-2023-46750

Published: 14/12/2023 Updated: 18/12/2023
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

Description<!---->An "Open-Redirect" flaw was found in the Apache Shiro project. This issue may allow remote malicious users to redirect legitimate users to arbitrary web sites containing malware that can compromise the user's machine and conduct phishing attacks to steal the user's credentials.An "Open-Redirect" flaw was found in the Apache Shiro project. This issue may allow remote malicious users to redirect legitimate users to arbitrary web sites containing malware that can compromise the user's machine and conduct phishing attacks to steal the user's credentials.

Vulnerable Product Search on Vulmon Subscribe to Product

apache shiro 2.0.0

apache shiro

Vendor Advisories

Debian Bug report logs - #1059288 shiro: CVE-2023-46750 Package: src:shiro; Maintainer for src:shiro is Debian Java Maintainers &lt;pkg-java-maintainers@listsaliothdebianorg&gt;; Reported by: Moritz Mühlenhoff &lt;jmm@inutilorg&gt; Date: Fri, 22 Dec 2023 12:21:08 UTC Severity: important Tags: security, upstream Reply ...
Description<!---->An "Open-Redirect" flaw was found in the Apache Shiro project This issue may allow remote attackers to redirect legitimate users to arbitrary web sites containing malware that can compromise the user's machine and conduct phishing attacks to steal the user's credentialsAn "Open-Redirect" flaw was found in the Apache Shiro projec ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> oss-sec mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> CVE-2023-46750: Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature ...