GHSA-m2rr-h6g4-9cm9

Source

https://github.com/advisories/GHSA-m2rr-h6g4-9cm9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m2rr-h6g4-9cm9/GHSA-m2rr-h6g4-9cm9.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-m2rr-h6g4-9cm9

Aliases

Published

2022-05-17T01:18:35Z

Modified

2023-11-07T22:42:26.863571Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Path Traversal in Apache Atlas

Details

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Database specific

{
    "severity": "HIGH",
    "cwe_ids": [
        "CWE-22",
        "CWE-284"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-11-04T18:45:29Z",
    "nvd_published_at": "2017-08-29T20:29:00Z"
}

References

Affected packages

Maven / org.apache.atlas:atlas-common

Package

Name: org.apache.atlas:atlas-common; View open source insights on deps.dev
Purl: pkg:maven/org.apache.atlas/atlas-common

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.6.0-incubating

Fixed

0.8-incubating

Affected versions

0.*

0.6-incubating

0.7-incubating

0.7.1-incubating

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m2rr-h6g4-9cm9/GHSA-m2rr-h6g4-9cm9.json"