Description
Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.
Remediation
References
https://github.com/Alluxio/alluxio/issues/10552
Related Vulnerabilities
CVE-2020-7656 Vulnerability in maven package org.webjars:jquery
CVE-2020-8203 Vulnerability in maven package org.fujion.webjars:lodash
CVE-2021-21307 Vulnerability in maven package org.lucee:lucee
CVE-2022-42003 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2022-25863 Vulnerability in npm package gatsby-plugin-mdx