Lucene search

K
osvGoogleOSV:CVE-2016-8751
HistoryJun 14, 2017 - 5:29 p.m.

CVE-2016-8751

2017-06-1417:29:00
Google
osv.dev
3

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%