apache-atlas

PyPI7 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting apache-atlaspage 1 of 1

CVE-2016-8752HIGHCVSS 7.5EG 7.5
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
CVE-2017-3150MEDIUMCVSS 6.1EG 6.1
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.
CVE-2017-3151MEDIUMCVSS 6.1EG 6.1
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality.
CVE-2017-3152MEDIUMCVSS 6.1EG 6.1
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.
CVE-2017-3153MEDIUMCVSS 6.1EG 6.1
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
CVE-2017-3154HIGHCVSS 7.5EG 7.5
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
CVE-2017-3155MEDIUMCVSS 6.1EG 6.1
2017-08-29
vulnerable: 0.0.1 ... 0.0.16 (11 versions)
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting.

Check whether apache-atlas is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for apache-atlas CVEs against the assets you own.

Start Free Scan →