Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Helix Front (UI)

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-22281

    Apache Helix Front (UI): Helix front hard-coded secret in the express-session

    ** UNSUPPORTED WHEN ASSIGNED ** The Apache Helix Front (UI) component contained a hard-coded secret, allowing an attacker to spoof sessions by generating their own fake cookies. This issue affects Apache Helix Front (UI): all versions. As this project is reti…

    Apache Software Foundation Apache Helix Front (UI) org.apache.helix:helix Maven