Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.atlas:atlas-common

7 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7
Registry
Maven Central

Advisories 7

  • Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag…

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.

    Affected: from 0.6.0-incubating, fixed in 0.7.1-incubating.

  • Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by…

    Affected: from 0.6.0-incubating, fixed in 0.8-incubating.