Skip to content
OpenAdvisories

Package · Maven

org.apache.hadoop:hadoop-client

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-3161

    Improper Neutralization of Input During Web Page Generation in Apache Hadoop

    The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-client Maven
  • Medium —
    CVE-2014-3627

    Improper Link Resolution Before File Access in Apache Hadoop

    The YARN NodeManager daemon in Apache Hadoop 0.23.0 through 0.23.11 and 2.x before 2.5.2, when using Kerberos authentication, allows remote cluster users to change the permissions of certain files to world-readable via a symlink attack in a public tar archive…

    org.apache.hadoop:hadoop-client Maven