CVE-2016-8751

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions

published June 14, 2017

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02133 · 81.7th percentile
Published
2017-06-14T17:00Z
EPSS history
Timeline
  • 14 JUN 17:00Z
    Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions
    cvelistv5