The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.
{ "nvd_published_at": "2017-04-26T20:59:00Z", "github_reviewed_at": "2022-07-01T17:31:59Z", "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-79" ] }