CVE-2022-47500CWE-601

Apache Helix: Open redirect

Medium · published December 19, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4.

Solution: removed the the forward component since it was improper designed for UI embedding.

User please upgrade to 1.1.0 to fix this issue.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01122 · 65.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-12-19T10:03Z
EPSS history
Timeline
  • 19 DEC 10:03Z
    Apache Helix: Open redirect
    cvelistv5