CVE-2016-8751

Published: 2017-06-14T17:29Z

Last Modified: 2024-11-21T02:59Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal users login and access policies. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt