CVE-2018-5798 – Cross-site scripting vulnerability in Cloudera Manager – Part 2
Author: Shafeeque Olassery Kunnikkal | Category: Cross Site Scripting, CVE-2018-5798, Cyber Security | Leave a Comment

Below is the details of the reflected XSS , I have found in Cloudera Enterprise. More details can be found here :- https://www.cloudera.com/documentation/other/securitybulletins/topics/Security-Bulletin.html#DOCS-3186 Login to Cloudera manager using credentialsadmin:admin 1. Navigate the following URL which includes the XSS Payload.
Continue Reading