Apache Atlas: zip path traversal in import functionality

높음 8.8CVE-2022-34271 · GHSA-p782-4j23-xqcg · Published 14/12/2022 · updated 17/06/2026

요약

CVE-2022-34271은(는) org.apache.atlas:apache-atlas, atlas (apache)에 영향을 주는 높음 (CVSS 8.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.5%, 전체 취약점의 73.9%보다 높음.
조치: 2.3.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.apache.atlas:apache-atlas Maven	`≥ 0.8.4, < 2.3.0`	`2.3.0`
atlas apache	`≥ 0.8.4, ≤ 2.2.0`	No fix yet

Description

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

NVD description

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

References

nvd.nist.gov/vuln/detail/CVE-2022-34271 · ADVISORY
apache/atlas commit 3415913 · WEB
apache/atlas · PACKAGE
issues.apache.org/jira/browse/ATLAS-4622 · WEB
lists.apache.org/thread/0rqvcxo6brmos9w3lzfsdn2lsmlblpw3 · WEB

org.apache.atlas:apache-atlas의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.atlas:apache-atlas

Maven

≥ 0.8.4, < 2.3.0

2.3.0

atlas

apache

≥ 0.8.4, ≤ 2.2.0

No fix yet

Description

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

NVD description

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

org.apache.atlas:apache-atlas의 다른 취약점

모두 보기 →