Security Advisory
CVE-2017-3161
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.