Filtered by vendor Apache
Subscriptions
Filtered by product Livy
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2021-26544 | 1 Apache | 1 Livy | 2024-11-21 | 5.4 Medium |
Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating. |
Page 1 of 1.