Red Hat JBoss Enterprise Application Platform Expansion Pack/shiro-jakarta-ee
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Apache Shiro’s Jakarta EE module used the HTTP Referer header in certain cases to issue redirect after a user login | org.apache.shiro:shiro-jakarta-eeRed Hat JBoss Enterprise Application Platform Expansion Pack/shiro-jakarta-ee | MavenRed Hat | Low | Fix reported | |
| Apache Shiro Vulnerable to Open Redirect, Server-Side Request Forgery | org.apache.shiro:shiro-jakarta-eeRed Hat JBoss Enterprise Application Platform Expansion Pack/shiro-jakarta-ee | MavenRed Hat | Medium | Fix reported |