Apache Atlas UI: Authenticated User XSS

MEDIO 5.4CVE-2025-62198 · GHSA-v73p-f52r-fmmr · Published 22/06/2026 · updated 06/10/2026

In breve

CVE-2025-62198 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda org.apache.atlas:atlas-dashboardv2, atlas (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.51%, superiore al 43.2% delle vulnerabilità.
Correzione: aggiornare a 2.5.0 o successiva.

Package	Affected versions	Patched versions
org.apache.atlas:atlas-dashboardv2 Maven	`< 2.5.0`	`2.5.0`
atlas apache	`< 2.5.0`	`2.5.0`

Description

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

NVD description

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2025-62198 · ADVISORY
apache/atlas commit 800f979 · WEB
apache/atlas · PACKAGE
lists.apache.org/thread/nv893lhz3ok08f25j3v4z1to5nrpdp7k · WEB
openwall.com/lists/oss-security/2026/06/20/1 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free