org.apache.atlas:atlas-authorization (0.7-incubating), org.apache.atlas:atlas-client (>=0.6-incubating, <=0.7-incubating) +10 more potentially affected by CVE-2017-3150 via org.apache.atlas:atlas-common (>=0.6-incubating, <=0.7-incubating)

org.apache.atlas:atlas-common MAVEN version =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6.0, =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2017-3150 Source advisory: OSV:GHSA-WVMQ-W7M8-G9XM...

CVE-2017-3150

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

amundsen-metadata (>=3.5.0, <=3.13.0), amundsen-metadata-neo4j4 (>=3.9.0, <=3.9.0.post1) potentially affected by CVE-2017-3150 via apache-atlas (0.0.11)

apache-atlas PYPI version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on apache-atlas and may be impacted: - amundsen-metadata =3.5.0, =3.9.0, =3.9.0.post1 Source cves: CVE-2017-3150 Source advisory: OSV:PYSEC-2017-106...

ddnatlas (>=0.1.7, <=0.1.9) potentially affected by CVE-2017-3150 via apache-atlas (0.0.15)

apache-atlas PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on apache-atlas and may be impacted: - ddnatlas =0.1.7, =0.1.9 Source cves: CVE-2017-3150 Source advisory: OSV:PYSEC-2017-106...

CVE-2017-3150

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

CVE-2017-3150

Apache Atlas (v0.6.0-incubating and v0.7.0-incubating) is affected by an insecure cookie storage issue: cookies could be accessible to client-side scripts, exposing potentially sensitive data. This is documented across multiple sources (GHSA-WVMQ-W7M8-G9XM, OSV, CNVD, NVD entries). The CVE-2017-3...