Lucene search
Veracode Vulnerability DatabaseVERACODE:3959HistoryApr 24, 2017 - 5:31 a.m.
Cross-site Scripting (XSS)
2017-04-2405:31:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
31.6%
spark-core is vulnerable to cross-site scripting (XSS) attacks. The attacks are possible because it does not use the stripXSS() function in the pages calling request.getParameter() in UIUtils.
Related
cve
cve
CVE-2017-7678
2017-07-12 13:29:00
nvd
nvd
CVE-2017-7678
2017-07-12 13:29:00
github
github
ibm
ibm
prion
prion
Code injection
2017-07-12 13:29:00
cvelist
cvelist
CVE-2017-7678
2017-07-12 13:00:00
osv
osv
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
2018-11-09 17:43:08
CVE-2017-7678
2017-07-12 13:29:00