GitHub Advisoryadvisory · Maven

GHSA-w3p6-94x2-xcvm Apache Ambari Open Redirect

MEDIUM Published 2022-05-17 Modified 2023-08-04 Official page ↗
Aliases
CVE-2015-5210
Ecosystem
Maven
Packages
org.apache.ambari:ambari
Severity
Moderate
Weaknesses
CWE-601
Reviewed
2023-08-04

Affected packages

• Maven org.apache.ambari:ambari: >= 1.7.0, < 2.1.2 → fixed in 2.1.2

Description

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

Related

Alias · CVE (1)

  • CVE-2015-5210 Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct… vulnerability

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References