CVE-2021-32481

Cloudera Hue 4.6.0 allows XSS via the type parameter...

CVE-2021-32481

CVE-2021-32481 affects Cloudera Hue 4.6.0 and enables Cross-Site Scripting via the type parameter. The vulnerability is documented across multiple sources (NVD entry with CVSS v3.1 base score 6.1, CVSS v2.0 base score 4.3) indicating a network-exposed flaw with user interaction required in the 3....