Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
XSS
Livy
NVD
GitHub
CVSS 3.1
5.4
EPSS
2.8%