![Severe Azure HDInsight flaws highlight dangers of cross-site scripting Severe Azure HDInsight flaws highlight dangers of cross-site scripting](https://www.csoonline.com/wp-content/uploads/2023/09/shutterstock_1555297898-1.jpg?quality=50&strip=all&w=1024)
Severe Azure HDInsight flaws highlight dangers of cross-site scripting
Six of the XSS flaws found by Orca in Azure HDInsight were stored and the other two were reflected. They were tracked as CVE-2023-36881 (four flaws), CVE-2023-35394, CVE-2023-38188, CVE-2023-35393, and CVE-2023-36877 and were flagged by Microsoft as Important. The four CVE-2023-36881 flaws are all located in different components of Apache Ambari, a web-based dashboard for…