Lucene search
GitHub Advisory DatabaseGHSA-9Q6V-RXMW-G3GHHistoryMar 01, 2024 - 3:31 p.m.
Apache Ambari: Various Cross site scripting problems
2024-03-0115:31:38
CWE-20
CWE-79
GitHub Advisory Database
github.com
2
apache ambari
cross site scripting
input validation
constraint enforcement
data access
session hijacking
malicious payloads
software upgrade
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8
Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads.
Users are recommended to upgrade to version 2.7.8 which fixes this issue.
Affected configurations
Node
org.apache.ambari\Matchambari
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.apache.ambari:ambari | lt | 2.7.8 |
Related
osv
osv
Apache Ambari: Various Cross site scripting problems
2024-03-01 15:31:38
veracode
veracode
Cross-Site Scripting (XSS)
2024-03-04 17:14:01
cve
cve
CVE-2023-50378
2024-03-01 15:15:08
prion
prion
Input validation
2024-03-01 15:15:00
nvd
nvd
CVE-2023-50378
2024-03-01 15:15:08
cvelist
cvelist
CVE-2023-50378 Apache Ambari: Various XSS problems
2024-03-01 14:38:29