{"action":"Upgrade org.apache.ranger:ranger to 0.5.0 or later.","affected":[{"fixed":"0.5.0","introduced":"0"}],"component":"org.apache.ranger:ranger","cve_ids":["CVE-2015-0265"],"ecosystem":"Maven","epss":0.04853,"exploited":false,"fixed_versions":["0.5.0"],"ghsa_id":"GHSA-83m2-9g78-rrj4","id":"tcs_01M5N8KMJ9P2KFW777DT6C6J82","modified_at":"2025-04-14T21:42:19.284535Z","published_at":"2022-05-17T03:57:20Z","references":["https://osv.dev/vulnerability/GHSA-83m2-9g78-rrj4","https://nvd.nist.gov/vuln/detail/CVE-2015-0265","https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger","https://github.com/apache/ranger","https://mail-archives.apache.org/mod_mbox/ranger-dev/201508.mbox/%3CD1E7EC30.9D53F%25vel@apache.org%3E","https://web.archive.org/web/20200228073946/http://www.securityfocus.com/bid/76208","http://www.slideshare.net/wojdwo/big-problems-with-big-data-hadoop-interfaces-security"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-83m2-9g78-rrj4","url":"https://osv.dev/vulnerability/GHSA-83m2-9g78-rrj4"}],"summary":"Apache Ranger Cross-site Scripting vulnerability"}