Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-45470

Apache Hama allows XSS and information disclosure

Description

missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Hama

  • 1.7.1 to < Apache Hama*affected

References