Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

HOCH 7.1CVE-2024-46910 · GHSA-x3v6-f5fr-4wwv · Published 13/02/2025 · updated 17/06/2026

Kurz gesagt

CVE-2024-46910 ist eine Schwachstelle (HOCH (CVSS 7.1)) in org.apache.atlas:apache-atlas, atlas (apache).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.57%, höher als bei 47.1% aller Schwachstellen.
Abhilfe: auf 2.4.0 oder neuer aktualisieren.

Package	Affected versions	Patched versions
org.apache.atlas:apache-atlas Maven	`≥ 2.0.0, < 2.4.0`	`2.4.0`
atlas apache	`≥ 2.0.0, < 2.4.0`	`2.4.0`

Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

NVD description

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2024-46910 · ADVISORY
apache/atlas · PACKAGE
lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy · WEB
openwall.com/lists/oss-security/2025/02/12/2 · WEB

Weitere Schwachstellen in org.apache.atlas:apache-atlas

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.atlas:apache-atlas

Maven

≥ 2.0.0, < 2.4.0

2.4.0

atlas

apache

≥ 2.0.0, < 2.4.0

2.4.0

Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

NVD description

Weitere Schwachstellen in org.apache.atlas:apache-atlas

Alle anzeigen →