Описание
Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policies
Apache Ranger before 0.6.is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.
Пакеты
Наименование
org.apache.ranger:ranger
maven
Затронутые версииВерсия исправления
< 0.6.3
0.6.3
Связанные уязвимости
CVSS3: 4.8
nvd
больше 8 лет назад
Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.