CVE-2020-13928

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources
Severity
6.1MEDIUM
EPSS
1.9%
top 16.82%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apache Atlas
Timeline
PublishedSep 16
Latest updateFeb 10

Description

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages3 packages

▶NVDapache/atlas< 2.1.0
▶CVEListV5apache_atlasApache Atlas 2.0.1

🔴Vulnerability Details

3
GHSA
Cross-site scripting in Apache Atlas↗2022-02-10
▶
OSV
Cross-site scripting in Apache Atlas↗2022-02-10
▶
CVEList
CVE-2020-13928: Apache Atlas before 2↗2020-09-16
▶
CVE-2020-13928 (MEDIUM CVSS 6.1) | Apache Atlas before 2.1.0 contain a | cvebase.io