{"action":"Upgrade org.apache.shiro:shiro-web to 1.12.0 (1.x) or 2.0.0-alpha-3 (2.x) or later.","affected":[{"fixed":"1.12.0","introduced":"0"},{"fixed":"2.0.0-alpha-3","introduced":"2.0.0-alpha-1"}],"component":"org.apache.shiro:shiro-web","cve_ids":["CVE-2023-34478"],"ecosystem":"Maven","epss":0.02074,"exploited":false,"fixed_versions":["1.12.0","2.0.0-alpha-3"],"ghsa_id":"GHSA-pmhc-2g4f-85cg","id":"tcs_01M5N97QXBH3D66X7SMPFJ70DR","modified_at":"2025-02-13T19:12:43.466421Z","published_at":"2023-07-24T21:30:39Z","references":["https://osv.dev/vulnerability/GHSA-pmhc-2g4f-85cg","https://nvd.nist.gov/vuln/detail/CVE-2023-34478","https://github.com/apache/shiro/commit/c3ede3f94efb442acb0795714a022c2c121d1da0","https://github.com/apache/shiro","https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qk","https://security.netapp.com/advisory/ntap-20230915-0005","http://www.openwall.com/lists/oss-security/2023/07/24/4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pmhc-2g4f-85cg","url":"https://osv.dev/vulnerability/GHSA-pmhc-2g4f-85cg"}],"summary":"Path Traversal in Apache Shiro"}