CVE-2022-45470
Assigner: apache
Published: 2022-11-21T00:00:00
State: PUBLISHED
affected: product: Apache Hama
vendor: Apache Software Foundation
versions: changes: at: 1.7.1
status: unknown
lessThan: Apache Hama*
status: affected
version: 1.7.1
versionType: custom
credits: value: Apache would like to thank QSec-Team for reporting this issue
descriptions: value: missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: discovery: UNKNOWN
title: Apache Hama allows XSS and information disclosure
x_generator: engine: Vulnogram 0.0.9