Description
Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.
Remediation
References
https://github.com/Alluxio/alluxio/issues/10552
Related Vulnerabilities
CVE-2017-16145 Vulnerability in npm package sspa
CVE-2022-36099 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki
CVE-2023-37899 Vulnerability in npm package @feathersjs/transport-commons
CVE-2018-3748 Vulnerability in npm package glance
CVE-2018-8009 Vulnerability in maven package org.apache.hadoop:hadoop-common