GitHub Advisoryadvisory · Maven
GHSA-v73p-f52r-fmmr Apache Atlas UI: Authenticated User XSS
MEDIUM
Official page ↗
- Aliases
- CVE-2025-62198
- Ecosystem
- Maven
- Packages
- org.apache.atlas:atlas-dashboardv2
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-80
- Reviewed
- 2026-09-11
Affected packages
• Maven org.apache.atlas:atlas-dashboardv2: < 2.5.0 → fixed in 2.5.0
Description
An authenticated user can perform XSS.
This issue affects Apache Atlas versions 2.4.0 and earlier.
Users are recommended to upgrade to version 2.5.0, which fixes the issue.
Related
Alias · CVE (1)
- CVE-2025-62198 An authenticated user can perform XSS. vulnerability
Weakness · CWE (1)
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2025-62198 advisory
- https://github.com/apache/atlas/commit/800f979307d6ea0f0b6563ec890f6b728022e497 web
- https://github.com/apache/atlas package
- https://lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7k web
- http://www.openwall.com/lists/oss-security/2026/06/20/1 web