title: Apache Shiro: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Shiro.
description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro.
Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
collectionURL: https://repo.maven.apache.org/maven2
defaultStatus: unaffected
packageName: org.apache.shiro:shiro-web
product: Apache Shiro
vendor: Apache Software Foundation
versions:
lessThan: 1.13.0, status: affected, version: 0, versionType: semver
lessThan: 2.0.0-alpha-4, status: affected, version: 2.0.0-alpha-1, versionType: semver
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]