CVE-2023-34478

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.

Mitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Shiro	< 1.12.0; < 2.0.0-alpha-3
apache	shiro	< 1.12.0
apache	shiro	2.0.0alpha1; 2.0.0alpha2

References

http://www.openwall.com/lists/oss-security/2023/07/24/4Mailing List, Third Party Advisory
https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qkMailing List
https://security.netapp.com/advisory/ntap-20230915-0005/
http://www.openwall.com/lists/oss-security/2023/07/24/4Mailing List, Third Party Advisory
https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qkMailing List
https://security.netapp.com/advisory/ntap-20230915-0005/

Timeline

Published: Jul 24, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-344866.1itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be CVE-2023-344879.8itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login pa CVE-2023-344887.8NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.CVE-2023-34497.2A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file CVE-2023-344947.5NanoMQ 0.16.5 is vulnerable to heap-use-after-free in the nano_ctx_send function of nmq_mqtt.c.CVE-2023-34507.2A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component CVE-2023-34529.8The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter CVE-2023-34538.1ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This could allow an attacker with ad CVE-2023-345375.4A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to CVE-2023-34549.8Remote code execution (RCE) vulnerability in Brocade Fabric OS after v9.0 and before v9.2.0 could allow an attacker to execute arbitrary cod CVE-2023-345409.8Langchain before v0.0.225 was discovered to contain a remote code execution (RCE) vulnerability in the component JiraAPIWrapper (aka the JIR CVE-2023-345419.8Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.