Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8
CVE-2023-38889
- EPSS 0.35%
- Published 15.08.2023 17:15:11
- Last modified 21.11.2024 08:14:23
An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroups(java.lang.String).
6.1
CVE-2020-21485
- EPSS 0.07%
- Published 20.06.2023 15:15:11
- Last modified 09.12.2024 22:15:20
Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.
9.8
CVE-2022-23848
- EPSS 0.5%
- Published 20.02.2022 19:15:09
- Last modified 21.11.2024 06:49:21
In Alluxio before 2.7.3, the logserver does not validate the input stream. NOTE: this is not the same as the CVE-2021-44228 Log4j vulnerability.
1