CVE-2021-29994

Description

References

• docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html · Vendor Advisory
• cloudera/hue · Third Party Advisory
• my.cloudera.com/knowledge/TSB-2021-487-Cloudera-Hue-is-vulnerable-to-Cross-Site · Vendor Advisory

hue 的其他漏洞

• CVE-2025-3884高危 7.5Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sen…
• CVE-2021-32481中危 6.1Cloudera Hue 4.6.0 allows XSS via the type parameter.
• CVE-2015-8094中危 6.1Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect users to arbitrary web sites and conduct phish…
• CVE-2016-4947中危 5.3Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.
• CVE-2016-4946中危 6.1Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script …