org.apache.atlas:atlas-authorization (>=0.7-incubating, <=0.7.1-incubating), org.apache.atlas:atlas-client (>=0.6-incubating, <=0.7.1-incubating) +10 more potentially affected by CVE-2016-8752 via org.apache.atlas:atlas-common (>=0.6-incubating, <=0.7.1-incubating)

org.apache.atlas:atlas-common MAVEN version =0.6-incubating, =0.7-incubating, =0.6-incubating, =0.7-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.7-incubating, =0.7-incubating, =0.6.0, =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2016-8752 Source advisory: OSV:GHSA-M2RR-H6G4-9CM9...

CVE-2016-8752

Apache Atlas versions 0.6.0 incubating, 0.7.0 incubating, and 0.7.1 incubating allow access to the webapp directory contents by pointing to URIs like /js and /img...

CVE-2016-8752

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) expose a path-traversal issue that allows access to the webapp directory contents by requesting URIs such as /js or /img. This is a disclosure vulnerability affecting the webapp content and does not indicate code...