Open redirect in Apache Shiro

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-46750 · ADVISORY
• apache/shiro commit 3b80f5c · WEB
• apache/shiro commit 8400d08 · WEB
• apache/shiro · PACKAGE
• lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9 · WEB
• security.netapp.com/advisory/ntap-20240808-0002 · WEB
• security.netapp.com/advisory/ntap-20241108-0002 · WEB
• security.netapp.com/advisory/ntap-20240808-0002
• security.netapp.com/advisory/ntap-20241108-0002

org.apache.shiro:shiro-web のその他の脆弱性

• CVE-2026-43828中 6.5Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute. This issue affects Apache Shir…
• CVE-2023-34478緊急 9.8Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when us…
• CVE-2020-17523緊急 9.8Apache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.
• CVE-2016-6802高 7.5Apache Shiro before 1.3.2 allows attackers to bypass intended servlet filters and gain access by leveraging use of a non-root servlet contex…