CVE-2021-26544CWE-79

CVE-2021-26544: fallo en Apache Livy (Incubating)

Apache Livy (Incubating) is vulnerable to cross site scripting

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Apache Livy+ Monitorear org.apache.livy:livy-server

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 2.8%
Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating.
Productos afectados
Apache Software Foundation · Apache Livy (Incubating)