AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

atlasPYSEC-2017-108

atlas: cross-site scripting

atlas

CVE-2017-3152 · Published Aug 29, 2017 · updated Oct 9, 2025

Medium6.1
No fix yet
Source advisory

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.

Affected versions

PackageAffectedFixed in
apache-atlas
PyPI
all versionsNo fix yet
Details and references
CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity from
the CVSS score
Also known as
CVE-2017-3152, GHSA-9xwq-72vp-5j3c

More atlas advisories

All atlas
High 7.5Aug 29, 2017Apache Atlas versions 0.6.0CVE-2016-8752no fix yetMedium 6.1Aug 29, 2017Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookiesCVE-2017-3150no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3151no fix yetMedium 6.1Aug 29, 2017atlas: cross-site scriptingCVE-2017-3153no fix yetHigh 7.5Aug 29, 2017Error responses from Apache Atlas versions 0.6.0-incubating and...CVE-2017-3154no fix yetMedium 6.1Aug 29, 2017Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scriptingCVE-2017-3155no fix yet