Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/100547 | Third Party Advisory VDB Entry |
https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:44
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2017-08-29 20:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-3151
Mitre link : CVE-2017-3151
CVE.ORG link : CVE-2017-3151
JSON object : View
Products Affected
apache
- atlas
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')