CVE-2015-0265

published 2016-04-11

CVE-2015-0265: Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

Cross-site scripting (XSS) vulnerability in the Policy Admin Tool in Apache Ranger before 0.5.0 allows remote attackers to inject arbitrary web script or HTML via the HTTP User-Agent header.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apache	ranger	<= 0.4.0	—

CWE-79