Apache Ranger prior to 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apache ranger |