AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

atlasPYSEC-2017-105

Apache Atlas versions 0.6.0

atlas

CVE-2016-8752 · Published Aug 29, 2017 · updated Oct 9, 2025

High7.5
No fix yet
Source advisory

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Affected versions

PackageAffectedFixed in
apache-atlas
PyPI
all versionsNo fix yet
Details and references
CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from
the CVSS score
Also known as
CVE-2016-8752, GHSA-m2rr-h6g4-9cm9

More atlas advisories

All atlas
Medium 6.1Aug 29, 2017Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookiesCVE-2017-3150no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3151no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3152no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3153no fix yetHigh 7.5Aug 29, 2017Error responses from Apache Atlas versions 0.6.0-incubating and...CVE-2017-3154no fix yetMedium 6.1Aug 29, 2017Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scriptingCVE-2017-3155no fix yet