Search for packages
| purl | pkg:maven/org.apache.hadoop/hadoop-common@2.0.0 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-f8vc-wfc8-hxqh
Aliases: CVE-2020-9492 |
Improper Privilege Management in Apache Hadoop In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS … |
Vulnerable |
|
GHSA-8wm5-8h9c-47pc
Aliases: CVE-2022-25168 |
Apache Hadoop argument injection vulnerability Apache Hadoop's `FileUtil.unTar(File, File)` API does not escape the input file name before being passed … |
Vulnerable |
|
CVE-2022-25168
|
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-9r7g-325h-mxrm
Aliases: CVE-2014-0229 |
Improper Authentication in Apache Hadoop Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x … |
Vulnerable Vulnerable |
|
CVE-2018-8009
|
Path Traversal Apache Hadoop is exploitable via the zip slip vulnerability in locations that accept a zip file. |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2017-15713
|
Information Exposure Vulnerability in Apache Hadoop allows a cluster user to expose private files owned by the user running the … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-pxv5-5vmp-3jj4
Aliases: CVE-2013-2192 |
Improper Authentication in Apache Hadoop The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x … |
Vulnerable |