CVE-2017-3161
Fixed upstream EPSS 4%
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.
Products: Apache Software Foundation Apache Hadoop
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.hadoop:hadoop-client | 2.7.0 |