Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-50378
HistoryMar 01, 2024 - 3:15 p.m.

Input validation

2024-03-0115:15:00
PRIOn knowledge base
www.prio-n.com
5
input validation
constraint enforcement
apache ambari
stored xss
unauthorized actions
data access
session hijacking
malicious payloads
upgrade
nvd

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8

Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads.

Users are recommended to upgrade to version 2.7.8 which fixes this issue.

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

Related for PRION:CVE-2023-50378