URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.apache.shiro:shiro-web(Maven) | 0 | 1.13.0 | N/A |
| org.apache.shiro:shiro-web(Maven) | 2.0.0-alpha-1 | 2.0.0-alpha-4 | N/A |
CVSS Metrics
