{"id":"CVE-2020-1936","aliases":["GHSA-q7q9-w24q-cpgh"],"url":"https://o3.security/vulnerability/CVE-2020-1936","summary":"Cross-site Scripting (XSS) in Apache Ambari Views","details":"A cross-site scripting issue was found in Apache Ambari Views. This was addressed in Apache Ambari 2.7.4.","published":"2021-03-02T09:15:12.863Z","modified":"2026-07-08T19:01:48.289749Z","cvss":{"score":6.1,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Maven","name":"org.apache.ambari:ambari","fixedVersion":"2.7.4"}],"fix":{"url":"https://github.com/apache/ambari/pull/3040","label":"apache/ambari#3040"},"references":[{"type":"ADVISORY","url":"http://www.openwall.com/lists/oss-security/2021/03/02/1"},{"type":"ADVISORY","url":"https://lists.apache.org/thread.html/946a9d72e664ad8bc592168d9a2fed88100c6e9f1bdfea08e91a3184%40%3Cuser.ambari.apache.org%3E"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1936"},{"type":"WEB","url":"https://github.com/apache/ambari/pull/3040"},{"type":"WEB","url":"https://github.com/apache/ambari/pull/3040/commits/a9cfdb9dcce63a3494c07c81ebb2cf8da218a210"},{"type":"WEB","url":"https://issues.apache.org/jira/browse/AMBARI-25329"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T19:01:48.289749Z"}}