GitHub Advisoryadvisory · Maven

GHSA-4wfh-48v4-3r84 Cross-site Scripting in Apache Hama

HIGH Published 2022-11-21 Modified 2022-11-23 Official page ↗
Aliases
CVE-2022-45470
Ecosystem
Maven
Packages
org.apache.hama:hama-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-20, CWE-79
Reviewed
2022-11-22

Affected packages

• Maven org.apache.hama:hama-core: <= 0.7.1 (no fix yet)

Description

Missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.

Related

Alias · CVE (1)

  • CVE-2022-45470 missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References