Search for packages
| purl | pkg:maven/org.apache.hadoop/hadoop-client@2.7.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1jer-fvap-a3et | Improper Input Validation HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace |
CVE-2017-3162
GHSA-pr9x-qmp5-j3rr |
| VCID-teju-geqm-j7cy | Cross-site Scripting The HDFS web UI in Apache Hadoop is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter. |
CVE-2017-3161
GHSA-qm7f-r83w-3p46 |