CVE-2018-16327

CVE-2018-16327 concerns a stored XSS vulnerability in Subrion CMS 4.2.1 via the admin panel URL configuration . The description across sources confirms the flaw as stored XSS, but the documents do not provide exploitation steps, affected environments beyond the version, root-cause analysis, or an...

CVE-2018-16327: Improper Neutralization of Input During Web Page Generation

There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration...

Design/Logic Flaw

The File Browser View in Apache Ambari before 2.2.1 allows remote authenticated administrators to read arbitrary files via a file: URL in the WebHDFS URL configuration...