CVE-2017-3161

Published: Apr 26, 2017

Modified: Aug 5, 2024

PUBLISHED

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

Vendor	Product	Versions
Apache Software Foundation	Apache Hadoop	affected `2.6.x and earlier`

vdb-entry

x_refsource_BID

mailing-list

x_refsource_MLIST

mailing-list

x_refsource_MLIST

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.