Description

Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.

Remediation

References

https://github.com/Alluxio/alluxio/issues/10552

Related Vulnerabilities

CVE-2017-18349 Vulnerability in maven package com.alibaba:fastjson

CVE-2022-0764 Vulnerability in npm package strapi

CVE-2013-1942 Vulnerability in npm package jplayer

CVE-2014-10065 Vulnerability in maven package org.webjars:remarkable

CVE-2023-43961 Vulnerability in maven package cn.dev33:sa-token-core

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Issue Tracking