medium6.1
CVE-2021-32482
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
Impact
Cloudera Manager 5.x, 6.x, 7.1.x, 7.2.x, and 7.3.x allows XSS via the path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudera | Cloudera Manager | from 5.0.0 through 5.16.2 from 6.0.0 through 6.3.4 from 7.1.0 through 7.1.4 from 7.2.0 through 7.2.4 from 7.3.0 through 7.3.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager
- https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833
- https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html#cloudera_manager
- https://my.cloudera.com/knowledge/TSB-2021-488-Cloudera-Manager-is-vulnerable-to-Cross-Site?id=322833