EUVD-2022-4996

Malicious code in bioql PyPI...

Improper Neutralization of Input During Web Page Generation in Apache Hadoop

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting XSS attack through an unescaped query parameter...

CVE-2017-3161

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting XSS attack through an unescaped query parameter...

CVE-2017-3161: Improper Neutralization of Input During Web Page Generation

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting XSS attack through an unescaped query parameter...

PT-2017-15694

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions prior to 2.7.0 Description The issue concerns a cross-site scripting XSS attack. It occurs through an unescaped query parameter in the HDFS web UI. This allows for potential malicious script injection and execution...