Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.
Remediation
References
https://lists.apache.org/thread/lr74xtxxbb1t3dfn5qzzwl2xjr3qlbmh
Related Vulnerabilities
CVE-2023-40827 Vulnerability in maven package org.pf4j:pf4j
CVE-2023-29525 Vulnerability in maven package org.xwiki.platform:xwiki-platform-distribution-war
CVE-2020-17527 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core
CVE-2016-3092 Vulnerability in maven package commons-fileupload:commons-fileupload
CVE-2020-6451 Vulnerability in maven package org.webjars.npm:electron