Non notée
CVE-2019-12397 Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue
Description
Policy import functionality in Apache Ranger 0.7.0 to 1.2.0 is vulnerable to a cross-site scripting issue. Upgrade to 2.0.0 or later version of Apache Ranger with the fix.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Ranger | Versions non publiées |
Références
- cwiki.apache.org cwiki.apache.org
- [oss-security] 20190808 CVE update - fixed in Apache Ranger 2.0.0 www.openwall.com
- [ranger-dev] 20191229 [jira] [Created] (RANGER-2681) CVE-2019-12397: Apache Ranger cross site scripting issue lists.apache.org
- [ranger-dev] 20191229 [jira] [Updated] (RANGER-2681) CVE-2019-12397: Apache Ranger cross site scripting issue lists.apache.org
- [ranger-dev] 20200121 [jira] [Resolved] (RANGER-2681) CVE-2019-12397: Apache Ranger cross site scripting issue lists.apache.org
- [ranger-dev] 20200121 [jira] [Commented] (RANGER-2681) CVE-2019-12397: Apache Ranger cross site scripting issue lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Ranger
Les 23 CVE de Apache Ranger →
CVE-2026-28672
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger
Non notée
CVE-2026-32227
SQL Injection vulnerability vulnerability in Apache Ranger
Non notée
CVE-2026-40920
Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0
Non notée
CVE-2026-42537
Remote Code Execution via JDBC URL Injection in Apache…
Non notée