Advisories for Maven/Org.alluxio/Alluxio-Parent package

2023

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

An issue in Alluxio v.2.9.3 and before allows an attacker to execute arbitrary code via a crafted script to the username parameter of lluxio.util.CommonUtils.getUnixGroups(java.lang.String).

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Cross Site Scripting vulnerability in Alluxio v.1.8.1 allows a remote attacker to executea arbitrary code via the path parameter in the browse board component.