Cross Site Scripting Vulnerability in Alluxio by Alluxio
CVE-2020-21485

6.1MEDIUM

Key Information:

Vendor

Alluxio

Status
Alluxio
Vendor
CVE Published:
20 June 2023

What is CVE-2020-21485?

The vulnerability identified in Alluxio version 1.8.1 allows remote attackers to execute arbitrary code through crafted input sent via the path parameter in the browse board component. This exploitation could lead to serious security breaches, making it critical for users to apply necessary patches and updates to mitigate potential risks.

References

https://github.com/Alluxio/alluxio/issues/10552

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.