CVE-2020-21485

Name of the Vulnerable Software and Affected Versions Alluxio version 1.8.1

Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the path parameter in the "browse board component".

Recommendations For Alluxio version 1.8.1, consider restricting access to the browse board component until a patch is available. As a temporary workaround, avoid using the path parameter in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.