Apache Shiro's Jakarta EE module improperly uses the HTTP Referer header to determine the redirect target after user login. This insufficient validation of a client-controlled header can allow attackers to influence the redirect destination. The vulnerability affects specific versions of Apache Shiro when using the shiro-jakarta-ee integration module.