Source: shiro
X-Debbugs-CC: t...@security.debian.org
Severity: important
Tags: security
Hi,
The following vulnerability was published for shiro.
CVE-2023-46750[0]:
| URL Redirection to Untrusted Site ('Open Redirect') vulnerability
| when "form" authentication is used in Apache Shiro. Mitigation:
| Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2023-46750
https://www.cve.org/CVERecord?id=CVE-2023-46750
Please adjust the affected versions in the BTS as needed.
