CVE-2017-3161

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter

published April 26, 2017

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03869 · 90.1th percentile
Published
2017-04-26T20:00Z
EPSS history
Timeline
  • 26 APR 20:00Z
    The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter
    cvelistv5