Bug#1059288: shiro: CVE-2023-46750

[Moritz Mühlenhoff]

Source: shiro
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for shiro.

CVE-2023-46750[0]:
| URL Redirection to Untrusted Site ('Open Redirect') vulnerability
| when "form" authentication is used in Apache Shiro. Mitigation:
| Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+.

https://lists.apache.org/thread/hoc9zdyzmmrfj1zhctsvvtx844tcq6w9

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-46750
    https://www.cve.org/CVERecord?id=CVE-2023-46750

Please adjust the affected versions in the BTS as needed.