~ / search / GHSA-fpqp-v323-44xv

GHSA-fpqp-v323-44xv

Cross-site scripting in Apache Ranger

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-12397

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.ranger:ranger >= 0.7.0, < 2.0.0 2.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version of Apache Ranger with the fix.

References

External links from the advisory. They lead to third-party sites.