Lucene search
K

6 matches found

NVD
NVD
added 2025/05/22 1:15 a.m.10 views

CVE-2025-3884

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS0.11837EPSS
Exploits0References1
OSV
OSV
added 2025/05/22 1:15 a.m.1 views

CVE-2025-3884

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS6.3AI score
Exploits0References1
Cvelist
Cvelist
added 2025/05/22 12:49 a.m.17 views

CVE-2025-3884 Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...

7.5CVSS0.11837EPSS
Exploits0References1
CVE
CVE
added 2025/05/22 12:49 a.m.77 views

CVE-2025-3884

CVE-2025-3884 concerns Cloudera Hue’s Ace Editor, where a directory-traversal flaw arises from inadequate validation of a user-supplied path before file operations. The issue could allow remote, unauthenticated attackers to disclose sensitive information within the service account context on affe...

7.5CVSS6AI score0.11837EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2025/05/22 12:0 a.m.2 views

Cloudera Hue 路径遍历漏洞

Cloudera Hue is a web-based, open source interactive query editor for visualizing and sharing data from Cloudera, Inc. A path traversal vulnerability exists in Cloudera Hue that stems from Ace Editor not properly validating user-supplied paths, which could lead to information disclosure...

7.5CVSS7.3AI score0.11837EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/04/23 12:0 a.m.15 views

(0Day) Cloudera Hue Ace Editor Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Cloudera Hue. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Ace Editor web application. The issue results from the lack of proper validatio...

7.5CVSS6.2AI score0.11837EPSS
Exploits0
Rows per page
Query Builder