CVE-2020-13928

6.1MEDIUM

Key Information:

Vendor
Apache
Status
Apache Atlas
Vendor
CVE Published:
16 September 2020

Summary

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

Affected Version(s)

Apache Atlas Apache Atlas 2.0.1

References

https://lists.apache.org/thread.html/ra468036f913be41b0c8...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.