~ / search / GHSA-x3v6-f5fr-4wwv

GHSA-x3v6-f5fr-4wwv

Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-46910

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.atlas:apache-atlas >= 2.0.0, < 2.4.0 2.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.