Description
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.
Remediation
References
https://lists.apache.org/thread/lr74xtxxbb1t3dfn5qzzwl2xjr3qlbmh
Related Vulnerabilities
CVE-2022-39353 Vulnerability in npm package @xmldom/xmldom
CVE-2019-1003009 Vulnerability in maven package rg.jenkins-ci.plugins:active-directory
CVE-2021-40822 Vulnerability in maven package org.geoserver:gs-main
CVE-2022-36898 Vulnerability in maven package com.compuware.jenkins:compuware-ispw-operations
CVE-2016-10735 Vulnerability in maven package li.rudin.mavenjs:bootstrap