Launchpad.net

CVE 2017-3161

The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

See the CVE page on Mitre.org for more details.