GitHub Advisoryadvisory · Maven

GHSA-x3v6-f5fr-4wwv Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

MEDIUM Published 2025-02-13 Modified 2025-02-13 Official page ↗
Aliases
CVE-2024-46910
Ecosystem
Maven
Packages
org.apache.atlas:apache-atlas
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weaknesses
CWE-80
Reviewed
2025-02-13

Affected packages

• Maven org.apache.atlas:apache-atlas: >= 2.0.0, < 2.4.0 → fixed in 2.4.0

Description

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2024-46910 An authenticated user can perform XSS and potentially impersonate another user. vulnerability

Weakness · CWE (1)

  • CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page weakness

References