Skip to content
OpenAdvisories
Medium · 6.1 CVE-2017-3151 EUVD-2017-0007GHSA-236h-r3w7-c85cPYSEC-2017-107

Cross-site Scripting in Apache Atlas

Published Aug 29, 2017 · Updated Sep 17, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Atlas Package: apache-atlas Package: org.apache.atlas:atlas-common Ecosystem: Maven Ecosystem: PyPI

Description

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Atlas 0.6.0-incubating, 0.7.0-incubating —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.atlas:atlas-common >= 0.6.0-incubating, < 0.7.1-incubating 0.7.1-incubating GHSA-236h-r3w7-c85c
PyPI apache-atlas all versions — PYSEC-2017-107

References