You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Arnout Engelen <en...@apache.org> on 2022/11/21 09:31:56 UTC

CVE-2022-45470: Apache Hama allows XSS and information disclosure

Description:

** UNSUPPORTED WHEN ASSIGNED ** missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.

Credit:

Apache would like to thank QSec-Team for reporting this issue