org.apache.atlas:atlas-authorization (0.7-incubating), org.apache.atlas:atlas-client (>=0.6-incubating, <=0.7-incubating) +10 more potentially affected by CVE-2017-3152 via org.apache.atlas:atlas-common (>=0.6-incubating, <=0.7-incubating)

org.apache.atlas:atlas-common MAVEN version =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6.0, =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2017-3152 Source advisory: OSV:GHSA-9XWQ-72VP-5J3C...

org.apache.atlas:atlas-authorization (0.7-incubating), org.apache.atlas:atlas-client (>=0.6-incubating, <=0.7-incubating) +10 more potentially affected by CVE-2017-3152 via org.apache.atlas:atlas-common (>=0.6-incubating, <=0.7-incubating)

org.apache.atlas:atlas-common MAVEN version =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6-incubating, =0.6.0, =0.6.0, =0.6.0, =0.7.1 Source cves: CVE-2017-3152 Source advisory: GHSA-9XWQ-72VP-5J3C...

amundsen-metadata (>=3.5.0, <=3.13.0), amundsen-metadata-neo4j4 (>=3.9.0, <=3.9.0.post1) potentially affected by CVE-2017-3152 via apache-atlas (0.0.11)

apache-atlas PYPI version 0.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on apache-atlas and may be impacted: - amundsen-metadata =3.5.0, =3.9.0, =3.9.0.post1 Source cves: CVE-2017-3152 Source advisory: OSV:PYSEC-2017-108...

ddnatlas (>=0.1.7, <=0.1.9) potentially affected by CVE-2017-3152 via apache-atlas (0.0.15)

apache-atlas PYPI version 0.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on apache-atlas and may be impacted: - ddnatlas =0.1.7, =0.1.9 Source cves: CVE-2017-3152 Source advisory: OSV:PYSEC-2017-108...

CVE-2017-3152

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality...

CVE-2017-3152

Apache Atlas is affected in versions 0.6.0-incubating and 0.7.0-incubating by a DOM-based XSS vulnerability in the edit-tag function. The CNVD entry describes an ability for a remote attacker to inject arbitrary web script or HTML, indicating browser-side script execution risk. The CVE entry conf...