ArangoDB Community Edition 3.4.2-1 - Cross-Site Scripting

Exploit Title: ArangoDB Community Edition 3.4.2-1 | Cross-Site Scripting Date: 17.02.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.arangodb.com Software Link: https://www.arangodb.com/download-major/ Version: 3.4.2-1 Introduction ArangoDB is a native multi-model, open-source databa...

com.arangodb:arangodb-spark-connector (>=1.0.0-beta1, <=1.0.7), com.cloudera.livy:livy-repl_2.11 (0.3.0) +71 more potentially affected by CVE-2018-17190 via org.apache.spark:spark-core_2.11 (1.6.2)

org.apache.spark:spark-core2.11 MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.11 and may be impacted: - com.arangodb:arangodb-spark-connector =1.0.0-beta1, =0.1.52.11, =0.3.0, =0.1.52.11, =0.3.0,...