Apache Helix (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-07-26. Vendor: Apache Software Foundation.

CVEs of Apache Helix

• CVE-2023-38647 - CVSS 9.8 (critical), 2023-07-26: An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize…
• CVE-2022-47500 - CVSS 6.1 (medium), 2022-12-19: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all…