org.apache.atlas:atlas-authorization (0.7-incubating), org.apache.atlas:atlas-client (>=0.6-incubating, <=0.7-incubating) +10 more potentially affected by CVE-2017-3151 via org.apache.atlas:atlas-common (>=0.6-incubating, <=0.7-incubating)

org.apache.atlas:atlas-common MAVEN version =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6.0, =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2017-3151 Source advisory: GHSA-236H-R3W7-C85C...

ddnatlas (>=0.1.7, <=0.1.9) potentially affected by CVE-2017-3151 via apache-atlas (0.0.15)

apache-atlas PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on apache-atlas and may be impacted: - ddnatlas =0.1.7, =0.1.9 Source cves: CVE-2017-3151 Source advisory: OSV:PYSEC-2017-107...

CVE-2017-3151

Apache Atlas CVE-2017-3151 affects versions 0.6.0-incubating and 0.7.0-incubating, with a Stored Cross-Site Scripting flaw in the edit-tag functionality. Root cause details are not elaborated beyond the XSS issue; no exploit specifics are provided in the connected documents. The impact is implied...