StackRadarChart IndexLive demo

CVE-2023-46750

Medium

Advisory

Published 14 Dec 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.1; base score, highest
EPSS: 0.015; 73rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

Open redirect in Apache Shiro

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
shiro-webmaven	1.2.3, 1.2.6, 1.4.0, 1.6.0+4 more	1.13.0	10

OSV records: GHSA-hhw5-c326-822h

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

omada-controllergeek-cookbook

1 of 1 See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-web@1.4.0	1.13.0

Open the chart page →

11,553

omada-controllerandrelote-k8s

1 of 1 See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
mbentley/omada-controller :4.3	f4e682274bed	shiro-web@1.4.0	1.13.0

Open the chart page →

11,553

axelor-open-suiteaxelor-open-suite

1 of 2 See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-web@1.9.1	1.13.0

Open the chart page →

9,722

cassandra-reapercloudnativeapp

1 of 1 See more

cassandra-reaper cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-web@1.2.3	1.13.0

Open the chart page →

5,078

shenyuerdeng

1 of 2 See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-web@1.7.0	1.13.0

Open the chart page →

12,513

nexusjenkins-x

1 of 1 See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-web@1.6.0	1.13.0

Open the chart page →

12,856

ladeitladeit

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
ladeit/ladeit :latest	962b665ffe82	shiro-web@1.4.0	1.13.0

Open the chart page →

26,356

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-web@1.2.6	1.13.0

Open the chart page →

43,341

apache-knox-helmpfisterer-knox

1 of 1 See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-web@1.7.0	1.13.0

Open the chart page →

6,237

shenyushenyu

1 of 2 See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-web@1.8.0	1.13.0

Open the chart page →

8,804

shenyushenyu-helm-chart-test

1 of 2 See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-web@1.7.0	1.13.0

Open the chart page →

12,513

sonatype-nexus3simcube

1 of 2 See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
sonatype/nexus3 :3.58.1	586060431b64	shiro-web@1.10.0	1.13.0

Open the chart page →

4,946

shenyutest-helm

1 of 2 See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-46750.

Container image	Digest	Package	Fixed in
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-web@1.7.0	1.13.0

Open the chart page →

12,513

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
apache/shenyu-admin :2.4.2	e8b7c4ddd069	shiro-web@1.7.0	1.13.0	3
mbentley/omada-controller :4.3	f4e682274bed	shiro-web@1.4.0	1.13.0	2
apache/shenyu-admin :2.5.1	e2be712fc4f4	shiro-web@1.8.0	1.13.0	1
farberg/apache-knox-docker :1.6.1	4b4a22487394	shiro-web@1.7.0	1.13.0	1
ladeit/ladeit :latest	962b665ffe82	shiro-web@1.4.0	1.13.0	1
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	shiro-web@1.2.6	1.13.0	1
pmoscode/axelor-open-suite :v7.2.57	a58f4d762f5c	shiro-web@1.9.1	1.13.0	1
sonatype/nexus3 :3.58.1	586060431b64	shiro-web@1.10.0	1.13.0	1
thelastpickle/cassandra-reaper :1.3.0	9c53996c457d	shiro-web@1.2.3	1.13.0	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	shiro-web@1.6.0	1.13.0	1