CVE-2022-45470CWE-20

Apache Hama allows XSS and information disclosure

High · published November 21, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01320 · 70.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Apache Hama allows XSS and information disclosure
    cvelistv5