Em resumo
- CVE-2017-15712 é uma vulnerabilidade MÉDIO (CVSS 6.5) que afeta org.apache.oozie:oozie-core, oozie (apache).
- Chance de exploração nos próximos 30 dias (EPSS): 2.5%, maior que 84.8% das vulnerabilidades.
- Correção: atualize para 5.0.0 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| org.apache.oozie:oozie-core Maven | ≥ 3.1.3, < 5.0.0
| 5.0.0
|
| oozie | = 3.1.2= 3.1.3= 3.2= 3.2.0= 3.3.0= 3.3.1= 3.3.2= 4.0.0= 4.0.1= 4.1.0= 4.2.0= 4.3.0= 5.0.0
| No fix yet |
Description
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.
NVD description
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitive files on the Oozie server host.
Mais vulnerabilidades de org.apache.oozie:oozie-core
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free