Description

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

Remediation

References

https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E

Related Vulnerabilities

CVE-2020-7599 Vulnerability in maven package com.gradle.plugin-publish:com.gradle.plugin-publish.gradle.plugin

CVE-2018-5158 Vulnerability in maven package org.webjars.bower:pdfjs-dist

CVE-2023-31125 Vulnerability in npm package engine.io

CVE-2020-8203 Vulnerability in maven package org.webjars:lodash

CVE-2022-35912 Vulnerability in maven package org.grails:grails-databinding

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Mailing List Vendor Advisory