Skip to content

CVE-2016-8752 Path Traversal in Apache Atlas

HighCVSS 7.5 EPSS 2.1%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Affected products

ProductAffected versionsFixed in
pypi apache-atlas(PyPI) All versions No fix listed
pypi apache-atlas(PyPI) = 0.0.1 No fix listed
pypi apache-atlas(PyPI) = 0.0.11 No fix listed
pypi apache-atlas(PyPI) = 0.0.12 No fix listed
pypi apache-atlas(PyPI) = 0.0.13 No fix listed
pypi apache-atlas(PyPI) = 0.0.14 No fix listed
pypi apache-atlas(PyPI) = 0.0.2 No fix listed
pypi apache-atlas(PyPI) = 0.0.3 No fix listed
pypi apache-atlas(PyPI) = 0.0.4 No fix listed
pypi apache-atlas(PyPI) = 0.0.5 No fix listed
pypi apache-atlas(PyPI) = 0.0.15 No fix listed
pypi apache-atlas(PyPI) = 0.0.16 No fix listed
org.apache.atlas/atlas-common(Maven) >= 0.6.0-incubating, < 0.8-incubating 0.8-incubating
org.apache.atlas/atlas-common(Maven) = 0.6-incubating No fix listed
org.apache.atlas/atlas-common(Maven) = 0.7-incubating No fix listed
org.apache.atlas/atlas-common(Maven) = 0.7.1-incubating No fix listed
apache atlas = 0.6.0 No fix listed
apache atlas = 0.6.0-rc1 No fix listed
apache atlas = 0.6.0-rc2 No fix listed
apache atlas = 0.7.0 No fix listed
apache atlas = 0.7.0-rc1 No fix listed
apache atlas = 0.7.0-rc2 No fix listed
apache atlas = 0.7.1 No fix listed
apache atlas = 0.7.1-rc1 No fix listed
apache atlas = 0.7.1-rc2 No fix listed
Show 4 more
ProductAffected versionsFixed in
apache atlas = 0.7.1-rc3 No fix listed
Apache Atlas = 0.6.0-incubating No fix listed
Apache Atlas = 0.7.0-incubating No fix listed
Apache Atlas = 0.7.1-incubating No fix listed

References