Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1tMnJyLWg2ZzQtOWNtOc4AAZeM

Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Permalink: https://github.com/advisories/GHSA-m2rr-h6g4-9cm9
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tMnJyLWg2ZzQtOWNtOc4AAZeM
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 2 years ago
Updated: about 1 year ago

CVSS Score: 7.5
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Percentage: 0.00107
EPSS Percentile: 0.445

Identifiers: GHSA-m2rr-h6g4-9cm9, CVE-2016-8752
References:

• https://nvd.nist.gov/vuln/detail/CVE-2016-8752
• https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86@%3Cdev.atlas.apache.org%3E
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-atlas/PYSEC-2017-105.yaml
• https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E
• https://github.com/advisories/GHSA-m2rr-h6g4-9cm9

Blast Radius: 13.9

Affected Packages