What’s Vulnerable › Vulnerabilities

CVE-2017-3150

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-79

Description

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script.

Affected products

• Apache Software Foundation Apache Atlas: 0.6.0, 0.6.0-rc1, 0.6.0-rc2, 0.7.0, 0.7.0-rc1, 0.7.0-rc2

References

• http://www.securityfocus.com/bid/100536
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E
• http://www.securityfocus.com/bid/100536
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E

Get alerted when CVE-2017-3150 or the next vulnerability affects your stack