CVE-2020-1936: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

January 6, 2022

A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.

References

github.com/advisories/GHSA-q7q9-w24q-cpgh
github.com/apache/ambari/pull/3040
github.com/apache/ambari/pull/3040/commits/a9cfdb9dcce63a3494c07c81ebb2cf8da218a210
nvd.nist.gov/vuln/detail/CVE-2020-1936

Code Behaviors & Features

Detect and mitigate CVE-2020-1936 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →