CVE-2019-12397

Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue

published August 8, 2019

CVSS
—
EPSS
3%
Percentile
87.1
In the wild
Unconfirmed
What it is

Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version of Apache Ranger with the fix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02965 · 87.1th percentile
Published
2019-08-08T17:06Z
EPSS history
Timeline
  • 08 AUG 17:06Z
    Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue
    cvelistv5