Stored Cross-Site Scripting Vulnerability in Apache Ranger before 0.6.3

CVE-2016-8751 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies.

Learn more about our User Device Pen Test.