GHSA-p782-4j23-xqcg
Apache Atlas: zip path traversal in import functionality
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.apache.atlas:apache-atlas | >= 0.8.4, < 2.3.0 | 2.3.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.
References
External links from the advisory. They lead to third-party sites.