What is GHSA-mhxg-2xf7-4xwx?

GHSA-mhxg-2xf7-4xwx is a security advisory published by GitHub Security Advisories with Medium severity. Apache Helix UI vulnerable to Open Redirect

Which CVE IDs does GHSA-mhxg-2xf7-4xwx cover?

GHSA-mhxg-2xf7-4xwx covers the following CVE IDs: CVE-2022-47500. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mhxg-2xf7-4xwx?

GHSA-mhxg-2xf7-4xwx has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-mhxg-2xf7-4xwx?

GHSA-mhxg-2xf7-4xwx affects 1 product, including: maven/org.apache.helix:helix:\u003e= 0.8.0, \u003c 1.1.0.

GHSA-mhxg-2xf7-4xwxMediumCVSS 6.1

Apache Helix UI vulnerable to Open Redirect

Vendor

GitHub Security Advisories

Published

December 19, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-47500 →

📋 Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to and including 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.

🎯 Affected products1

maven/org.apache.helix:helix:>= 0.8.0, < 1.1.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2022-47500
https://lists.apache.org/thread/lr74xtxxbb1t3dfn5qzzwl2xjr3qlbmh
https://github.com/advisories/GHSA-mhxg-2xf7-4xwx