AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

atlasGHSA-v62j-fcxq-j239

Stored XSS in Apache Atlas

atlas

CVE-2019-10070 · Published Jan 8, 2020 · updated Nov 8, 2023

Medium6.1
Fix: upgrade to 0.8.4 or later (2 fixed versions below)
GitHub advisory

Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality

Affected versions

PackageAffectedFixed in
org.apache.atlas:apache-atlas
Maven
< 0.8.40.8.4
>= 1.0.0, < 1.2.01.2.0
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-79
Also known as
CVE-2019-10070

More atlas advisories

All atlas
Medium 6.1Feb 10, 2022Cross-site scripting in Apache AtlasCVE-2020-13928fixed in 2.1.0High 7.5Aug 29, 2017Apache Atlas versions 0.6.0CVE-2016-8752no fix yetMedium 6.1Aug 29, 2017Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookiesCVE-2017-3150no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3151no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3152no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3153no fix yet