Medium CVE-2015-5210 EUVD-2022-5481GHSA-w3p6-94x2-xcvm

Apache Ambari Open Redirect

Published Nov 2, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Package: org.apache.ambari:ambari Ecosystem: Maven

Description

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	org.apache.ambari:ambari	>= 1.7.0, < 2.1.2	2.1.2	GHSA-w3p6-94x2-xcvm

References

https://cwiki.apache.org/confluence/display/AMBARI/Ambari+Vulnerabilities
[oss-security] 20151013 [CVE-2015-5210] Unvalidated Redirects and Forwards using targetURI parameter can enable phishing exploits mailing-list