GitHub Advisoryadvisory · Maven

GHSA-mhxg-2xf7-4xwx Apache Helix UI vulnerable to Open Redirect

MEDIUM Published 2022-12-19 Modified 2022-12-27 Official page ↗
Aliases
CVE-2022-47500
Ecosystem
Maven
Packages
org.apache.helix:helix
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601
Reviewed
2022-12-19

Affected packages

• Maven org.apache.helix:helix: >= 0.8.0, < 1.1.0 → fixed in 1.1.0

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to and including 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.

Related

Alias · CVE (1)

  • CVE-2022-47500 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References