Apache Oozie Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Apache Oozie, affecting all versions of the software. This issue arises from improper input handling during web page generation, allowing for the injection of malicious scripts. As Apache Oozie is a retired project, no official fix will be released. Users are advised to seek alternatives or limit access to trusted users only.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.