[<prev] [next>] [day] [month] [year] [list]
Message-ID: <27bed20a-2214-91ba-2fce-42b651099354@apache.org>
Date: Fri, 01 Mar 2024 14:31:18 +0000
From: Brahma Reddy Battula <brahma@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2023-50378: Apache Ambari: Various XSS problems
Severity: important
Affected versions:
- Apache Ambari 2.7.0 through 2.7.7
Description:
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8
Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads.
Users are recommended to upgrade to version 2.7.8 which fixes this issue.
References:
https://ambari.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-50378
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
