CVE-2016-4946

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-4946

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-4946.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-4946

Published

2017-03-07T16:59:00Z

Modified

2025-04-20T03:21:17.820604Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in the HUE Users page.

References

Affected packages

Git / github.com/cloudera/hue

Affected ranges

Type: GIT
Repo: https://github.com/cloudera/hue
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

5326efbf509f39da41cf568fbaccb0fe2586d461

Affected versions

cdh4-base-2.*

cdh4-base-2.2.0

cdh4-base-2.5.0

cdh5-base-2.*

cdh5-base-2.5.0

cdh5-base-3.*

cdh5-base-3.0.0

cdh5-base-3.5.0

cdh5-base-3.6.0

cdh5-base-3.9.0

release-0.*

release-0.9.1

release-1.*

release-1.1.0

release-3.*

release-3.5.0

release-3.6.0

release-3.9.0