CVE-2020-1936: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

January 6, 2022

A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.

References

github.com/advisories/GHSA-q7q9-w24q-cpgh
github.com/apache/ambari/pull/3040
github.com/apache/ambari/pull/3040/commits/a9cfdb9dcce63a3494c07c81ebb2cf8da218a210
nvd.nist.gov/vuln/detail/CVE-2020-1936

Code Behaviors & Features

Detect and mitigate CVE-2020-1936 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →