Описание
Moderate severity vulnerability that affects org.apache.oozie:oozie-core
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.
Пакеты
Наименование
org.apache.oozie:oozie-core
maven
Затронутые версииВерсия исправления
<= 5.0.0
5.1.0
Связанные уязвимости
CVSS3: 6.5
nvd
около 7 лет назад
Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.