Apache Shiro Jakarta EE Module Open Redirect and SSRF Vulnerability

A vulnerability allowing URL redirection to untrusted sites (open redirect) and server-side request forgery (SSRF) has been identified in the Apache Shiro Jakarta EE integration module. This issue affects versions 2.0-alpha through 2.1.0 and 3.0.0-alpha-1. The vulnerability arises because the shiroSavedRequest cookie, used to redirect users after login, was not properly validated. As a result, an attacker could forge the cookie to have the server send an HTTP GET request to an arbitrary URL.

Impact

Exploitation of this vulnerability could lead to unauthorized redirection of users to untrusted sites and allow the server to make requests to potentially harmful URLs, which could be used to access internal resources or services.

Remediation

Users are advised to upgrade to Apache Shiro version 2.1.1 or 3.0.0-alpha-2 or later, both of which address the vulnerability by encrypting the shiroSavedRequest cookie.