| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.oozie:oozie-core | < 5.1.0 | 5.1.0 |
| oozie | = 3.1.3≥ 3.1.3, < 5.1.0 | 5.1.0 |
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free