CVE-2016-8752
HighSummary
Apache Atlas versions 0.6.0, 0.7.0, and 0.7.1 allow access to the webapp directory contents by pointing to URIs like /js and /img.
Risk Assessment
Access to the directory contents may lead to the disclosure of sensitive information, posing a security risk to the application.
Recommendation
It is recommended to block access to the /js and /img directories or implement appropriate security rules to protect the contents.
Other vulnerabilities in Apache Atlas
See all- CVE-2026-40563High
Apache Atlas has a code injection vulnerability that allows an attacker to alter Gremlin traversal logic by supplying malicious query strings. This can lead to unauthorized access to data.
- CVE-2017-3154High
Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.
- CVE-2026-50622High
In Apache Atlas, missing authorization in admin endpoints allows any authenticated user, regardless of role, to perform administrative operations.
- CVE-2025-62198Medium
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier.
Original NVD description (English source)
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.