Cloudera Hue 4.6.0 allows XSS via the type parameter.
- https://my.cloudera.com/knowledge/TSB-2021-487-Cloudera-Hue-is-vulnerable-to-Cross-Site?id=324634
- https://github.com/kosmosec/CVE-numbers