Apache Helix UI vulnerable to Open Redirect
Date: 2022-12
Affected: maven/org.apache.helix:helix
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2022-47500
CWE: CWE-601
CVSS: 6.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to and including 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.


Mitigations:

Architectural layers (MAESTRO):