Apache Knox (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-01-17. Vendor: Apache Software Foundation.

CVEs of Apache Knox

• CVE-2021-42357 - CVSS 6.1 (medium), 2022-01-17: When using Apache Knox SSO prior to 1.6.1, a request could be crafted to redirect a user to a malicious page due to improper URL parsing. A request that…
• CVE-2017-5646 - CVSS 6.8 (medium), 2017-05-26: For versions of Apache Knox from 0.2.0 to 0.11.0 - an authenticated user may use a specially crafted URL to impersonate another user while accessing WebHDFS…