Skip to content
OpenAdvisories
High · 7.5 CVE-2016-8752 EUVD-2017-0005GHSA-m2rr-h6g4-9cm9PYSEC-2017-105

Path Traversal in Apache Atlas

Published Aug 29, 2017 · Updated Sep 16, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Atlas Package: apache-atlas Package: org.apache.atlas:atlas-common Ecosystem: Maven Ecosystem: PyPI

Description

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Atlas 0.6.0-incubating, 0.7.0-incubating, 0.7.1-incubating —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.atlas:atlas-common >= 0.6.0-incubating, < 0.8-incubating 0.8-incubating GHSA-m2rr-h6g4-9cm9
PyPI apache-atlas all versions — PYSEC-2017-105

References