GHSA-9q6v-rxmw-g3gh
GitHub Security Advisory
Apache Ambari: Various Cross site scripting problems
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Lack of proper input validation and constraint enforcement in Apache Ambari prior to 2.7.8
Impact : As it will be stored XSS, Could be exploited to perform unauthorized actions, varying from data access to session hijacking and delivering malicious payloads.
Users are recommended to upgrade to version 2.7.8 which fixes this issue.
Affected Packages
Maven
org.apache.ambari:ambari
Affected versions:
0
(fixed in 2.7.8)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: November 25, 2025 6:29 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.