CVE-2023-46749

CVSS V2 None CVSS V3 None
Description
Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when used together with path rewriting Mitigation: Update to Apache Shiro 1.13.0+ or 2.0.0-alpha-4+, or ensure `blockSemicolon` is enabled (this is the default).
Overview
  • CVE ID
  • CVE-2023-46749
  • Assigner
  • apache
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-01-15T09:57:31.613Z
  • Last Modified Date
  • 2024-01-20T10:01:32.470Z
References
Reference URL Reference Tags
https://lists.apache.org/thread/mdv7ftz7k4488rzloxo2fb0p9shnp9wm vendor-advisory
History
Created Old Value New Value Data Type Notes
2024-06-24 22:25:35 Added to TrackCVE