Apache Knox

2 results · Clear filters · Feed

• Medium 6.1
  CVE-2021-42357

  DOM based XSS Vulnerability in Apache Knox

  When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that included a specially crafted request parameter could be used to redirect the user to a page controlled by …

  Apache Software Foundation Apache Knox org.apache.knox:gateway-service-knoxsso Maven
  Jan 17, 2022
• Medium 6.8
  CVE-2017-5646

  Apache Knox allows impersonation of users

  For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS through Apache Knox. This may result in escalated privileges and unauthorized data access. While this …

  Apache Software Foundation Apache Knox org.apache.knox:gateway-provider-identity-assertion-common Maven
  May 26, 2017