Skip to content
OpenAdvisories

Package · Maven

org.apache.helix:helix

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-22281

    Apache Helix Front (UI): Helix front hard-coded secret in the express-session

    ** UNSUPPORTED WHEN ASSIGNED ** The Apache Helix Front (UI) component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front (UI): all versions. As this project is reti…

    Apache Software Foundation Apache Helix Front (UI) org.apache.helix:helix Maven
  • Medium 6.1
    CVE-2022-47500

    Apache Helix: Open redirect

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper desig…

    Apache Software Foundation Apache Helix org.apache.helix:helix Maven