CVE-2020-35451

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

com.github.sakserv:hadoop-mini-clusters (0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +9 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=5.2.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =5.2.0, =0.1.1, =1.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.1 Source cves: CVE-2025-26796 Source advisory: GHSA-FMXW-76XQ-CMQQ...

com.github.sakserv:hadoop-mini-clusters (0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +9 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=5.2.0, <=5.2.1)

org.apache.oozie:oozie-core MAVEN version =5.2.0, =0.1.1, =1.2, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.0, =5.2.1 Source cves: CVE-2025-26796 Source advisory: OSV:GHSA-FMXW-76XQ-CMQQ...

de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2), org.apache.oozie:oozie-examples (4.2.0) +7 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (4.2.0)

org.apache.oozie:oozie-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener =1.0, =1.2 - org.apache.oozie:oozie-examples...

com.github.sakserv:hadoop-mini-clusters (0.0.14), de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2) +10 more potentially affected by CVE-2017-15712 via org.apache.oozie:oozie-core (>=4.1.0, <=4.2.0)

org.apache.oozie:oozie-core MAVEN version =4.1.0, =1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =4.2.0 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2017-15712 Source advisory: GHSA-2FX6-R6QX-3C7H...

CVE-2020-35451 Oozie local privilege escalation

There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in Oozie's sharelib during it's creation...

PT-2021-11768

Name of the Vulnerable Software and Affected Versions: Apache Oozie versions prior to 5.2.1 Description: The issue is related to a race condition in OozieSharelibCLI in Apache Oozie. This condition allows a malicious attacker to replace the files in Oozie's sharelib during its creation...

de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener (>=1.0, <=1.2), org.apache.oozie:oozie-examples (4.2.0) +7 more potentially affected by CVE-2018-11799 via org.apache.oozie:oozie-core (4.2.0)

org.apache.oozie:oozie-core MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.oozie:oozie-core and may be impacted: - de.m3y.oozie.prometheus:oozie-prometheus-job-event-listener =1.0, =1.2 - org.apache.oozie:oozie-examples...