GitHub Advisoryadvisory · Maven
GHSA-q7q9-w24q-cpgh Cross-site Scripting (XSS) in Apache Ambari Views
MEDIUM
Official page ↗
- Aliases
- CVE-2020-1936
- Ecosystem
- Maven
- Packages
- org.apache.ambari:ambari
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2021-03-26
Affected packages
• Maven org.apache.ambari:ambari: < 2.7.4 → fixed in 2.7.4
Description
A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.
Related
Alias · CVE (1)
- CVE-2020-1936 A cross-site scripting issue was found in Apache Ambari Views. vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-1936 advisory
- https://github.com/apache/ambari/pull/3040 web
- https://github.com/apache/ambari/pull/3040/commits/a9cfdb9dcce63a3494c07c81ebb2cf8da218a210 web
- https://issues.apache.org/jira/browse/AMBARI-25329 web
- https://lists.apache.org/thread.html/946a9d72e664ad8bc592168d9a2fed88100c6e9f1bdfea08e91a3184%40%3Cuser.ambari.apache.org%3E web
- http://www.openwall.com/lists/oss-security/2021/03/02/1 web