medium6.1

CVE-2020-13928

Apache Atlas before 2.1.0 contain a XSS vulnerability.

Impact

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

Affected products

Vendor	Product	Affected versions
Apache	Atlas	before 2.1.0

Weakness classification

CWE-79

References

NVD record
CVE.org record
https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E
https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E