VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Dec 19, 2022· Updated Jun 17, 2026

CVE-2022-47500

CVE-2022-47500

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4.

Solution: removed the the forward component since it was improper designed for UI embedding.

User please upgrade to 1.1.0 to fix this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.helix:helixMaven
>= 0.8.0, < 1.1.01.1.0

Affected products

3
  • Apache/Helix2 versions
    cpe:2.3:a:apache:helix:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:helix:*:*:*:*:*:*:*:*range: >=0.8.0,<=1.0.4
    • (no CPE)range: 0.8.0
  • ghsa-coords
    pkg:maven/org.apache.helix/helix
    Range: >= 0.8.0, < 1.1.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.