What’s Vulnerable › Vulnerabilities

CVE-2017-3152

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-29 · updated 2026-06-17
• Weakness: CWE-79

Description

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality.

Affected products

• Apache Software Foundation Apache Atlas: 0.6.0, 0.6.0-rc1, 0.6.0-rc2, 0.7.0, 0.7.0-rc1, 0.7.0-rc2

References

• http://www.securityfocus.com/bid/100577
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E
• http://www.securityfocus.com/bid/100577
• https://lists.apache.org/thread.html/4a4fef91e067fd0d9da569e30867c1fa65e2a0520acde71ddefee0ea%40%3Cdev.atlas.apache.org%3E

Get alerted when CVE-2017-3152 or the next vulnerability affects your stack