Directory Traversal Vulnerability in Cloudera Hue by Cloudera

CVE-2025-3884

What is CVE-2025-3884?

A directory traversal vulnerability exists within the Ace Editor web application in Cloudera Hue, allowing unauthorized remote attackers to access sensitive information. The flaw arises from inadequate validation of user-supplied paths, which, when exploited, can lead to the disclosure of files in the context of the service account. This vulnerability poses significant security risks for organizations utilizing affected installations, as it may expose critical data without requiring any form of authentication.

References