CVE-2017-3153 Cross-site Scripting in Apache Atlas
MediumCVSS 6.1
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi apache-atlas(PyPI) | All versions | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.1 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.11 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.12 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.13 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.14 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.2 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.3 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.4 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.5 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.15 | No fix listed |
| pypi apache-atlas(PyPI) | = 0.0.16 | No fix listed |
| org.apache.atlas/atlas-common(Maven) | >= 0.6.0-incubating, < 0.7.1-incubating | 0.7.1-incubating |
| org.apache.atlas/atlas-common(Maven) | = 0.6-incubating | No fix listed |
| org.apache.atlas/atlas-common(Maven) | = 0.7-incubating | No fix listed |
| apache atlas | = 0.6.0 | No fix listed |
| apache atlas | = 0.6.0-rc1 | No fix listed |
| apache atlas | = 0.6.0-rc2 | No fix listed |
| apache atlas | = 0.7.0 | No fix listed |
| apache atlas | = 0.7.0-rc1 | No fix listed |
| apache atlas | = 0.7.0-rc2 | No fix listed |
| Apache Atlas | = 0.6.0-incubating | No fix listed |
| Apache Atlas | = 0.7.0-incubating | No fix listed |
References
- 100578 vdb-entry
- [dev] 20170507 CVE updates: fixes in Apache Atlas 0.7.1-incubating mailing-list
- nvd.nist.gov third-party-advisory vendor-advisory
- lists.apache.org
- github.com
- web.archive.org
- github.com
- github.com product