AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ambariGHSA-w3p6-94x2-xcvm

Apache Ambari Open Redirect

ambari

CVE-2015-5210 · Published May 17, 2022 · updated Dec 6, 2024

Medium
Fix: upgrade to 2.1.2 or later
GitHub advisory

Open redirect vulnerability in Apache Ambari before 2.1.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the targetURI parameter.

Affected versions

PackageAffectedFixed in
org.apache.ambari:ambari
Maven
>= 1.7.0, < 2.1.22.1.2
Details and references
Severity from
GitHub (reviewed advisory)
Weakness
CWE-601
Also known as
CVE-2015-5210

More ambari advisories

All ambari
High 8.8Jul 12, 2023Apache Ambari Expression Language Injection vulnerabilityCVE-2022-45855fixed in 2.7.7High 8.8Jul 12, 2023Apache Ambari Expression Language Injection vulnerabilityCVE-2022-42009fixed in 2.7.7MediumMay 17, 2022Apache Ambari SSRF VulnerabilityCVE-2015-1775fixed in 2.1.0Medium 5.5May 17, 2022Apache Ambari reveals administrator passwordsCVE-2016-4976fixed in 2.4.0Critical 9.8May 17, 2022Apache Ambari Improper Access ControlCVE-2016-6807fixed in 2.4.2Medium 6.1Jan 6, 2022Cross-site Scripting (XSS) in Apache Ambari ViewsCVE-2020-1936fixed in 2.7.4