Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-21485

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-298m-hvgh-x9cw

Alluxio Cross Site Scripting vulnerability Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.

gitlab/maven/org.alluxio/alluxio-parent/CVE-2020-21485

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.