Skip to content
OpenAdvisories
Medium · 6.1 CVE-2020-1936 EUVD-2022-0674GHSA-q7q9-w24q-cpgh

Stored XSS in Apache Ambari

Published Mar 2, 2021 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Ambari Package: org.apache.ambari:ambari Ecosystem: Maven

Description

A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Ambari Apache Ambari – < 2.7.4 2.7.4

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.ambari:ambari < 2.7.4 2.7.4 GHSA-q7q9-w24q-cpgh

References