| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.livy:livy-server | ≥ 0.7.0-incubating, < 0.7.1-incubating | 0.7.1-incubating |
| livy | = 0.7.0-incubating |
Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free