Cross-site Scripting (XSS) in Apache Ambari Views

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-1936 · ADVISORY
• apache/ambari#3040 · WEB
• apache/ambari#3040 · WEB
• issues.apache.org/jira/browse/AMBARI-25329 · WEB
• lists.apache.org/thread.html/946a9d72e664ad8bc592168d9a2fed88100c6e9f1bdfea08e91a3184%40%3Cuser.ambari.apache.org%3E · WEB
• openwall.com/lists/oss-security/2021/03/02/1 · WEB

Lỗ hổng khác của org.apache.ambari:ambari

• CVE-2023-50378TRUNG BÌNH 6.1Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8    Impact : As it will be stored XSS, Could be e…
• CVE-2022-45855CAO 8.8SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary …
• CVE-2022-42009CAO 8.8SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary co…
• CVE-2016-4976TRUNG BÌNH 5.5Apache Ambari 2.x before 2.4.0 includes KDC administrator passwords on the kadmin command line, which allows local users to obtain sensitive…
• CVE-2016-6807NGHIÊM TRỌNG 9.8Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operati…