Package · Maven

org.apache.ambari.contrib.views:wfmanager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.5

CVE-2023-50380

Apache Ambari: authenticated users could perform XXE to read arbitrary files on the server

XML External Entity injection in apache ambari versions <= 2.7.7, Users are recommended to upgrade to version 2.7.8, which fixes this issue. More Details: Oozie Workflow Scheduler had a vulnerability that allowed for root-level file reading and privilege esca…

Apache Software Foundation Apache Ambari org.apache.ambari.contrib.views:wfmanager Maven

Feb 27, 2024