{"action":"Upgrade org.apache.shiro:shiro-web to 1.13.0 (1.x) or 2.0.0-alpha-4 (2.x) or later.","affected":[{"fixed":"1.13.0","introduced":"0"},{"fixed":"2.0.0-alpha-4","introduced":"2.0.0-alpha-1"}],"component":"org.apache.shiro:shiro-web","cve_ids":["CVE-2023-46750"],"ecosystem":"Maven","epss":0.01496,"exploited":false,"fixed_versions":["1.13.0","2.0.0-alpha-4"],"ghsa_id":"GHSA-hhw5-c326-822h","id":"tcs_01M5N90SPK0CPXTSQ0AZJXEPCP","modified_at":"2025-11-04T17:06:07.324210Z","published_at":"2023-12-14T09:30:19Z","references":["https://osv.dev/vulnerability/GHSA-hhw5-c326-822h","https://nvd.nist.gov/vuln/detail/CVE-2023-46750","https://github.com/apache/shiro/commit/3b80f5c8e5a95ba31e92e4825ecc0ba3148b555a","https://github.com/apache/shiro/commit/8400d08d5eac0bc4fae99d28c5adc82dd8a86eda","https://github.com/apache/shiro","https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9","https://security.netapp.com/advisory/ntap-20240808-0002","https://security.netapp.com/advisory/ntap-20241108-0002"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-hhw5-c326-822h","url":"https://osv.dev/vulnerability/GHSA-hhw5-c326-822h"}],"summary":"Open redirect in Apache Shiro"}