CVE-2016-8752

7.5 highEPSS 2.1%

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2017-08-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apache:atlas

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-m2rr-h6g4-9cm9	Maven	org.apache.atlas:atlas-common	>=0.6.0-incubating <0.8-incubating	0.8-incubating
PYSEC-2017-105	PyPI	apache-atlas	all versions	no fix published

References

https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E
https://lists.apache.org/thread.html/f7435d66b840daa2a38ad1329d639b70f5a9476e7580ae885d422e86%40%3Cdev.atlas.apache.org%3E

Check your stack JSON