WS-2015-0066

Hue versions cdh5-base-3.7.0 to cdh5-base-3.9.0, cdh5.4.0-rc1 to cdh5.4.9-release and release-2.3.0 to release-3.9.0 is vulnerable to XSS in jHueNotify and UserAdmin...