Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4.
Solution: removed the the forward component since it was improper designed for UI embedding.
User please upgrade to 1.1.0 to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Helix | 0.8.0 – ≤ 1.0.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.helix:helix | >= 0.8.0, < 1.1.0 | 1.1.0 | GHSA-mhxg-2xf7-4xwx |
References
- https://lists.apache.org/thread/lr74xtxxbb1t3dfn5qzzwl2xjr3qlbmh vendor-advisory