Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

高危 7.1CVE-2024-46910 · GHSA-x3v6-f5fr-4wwv · Published 13/02/2025 · updated 17/06/2026

要点

CVE-2024-46910 是影响 org.apache.atlas:apache-atlas, atlas (apache) 的高危 (CVSS 7.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.57%，高于 47.1% 的漏洞。
修复：升级到 2.4.0 或更高版本。

Package	Affected versions	Patched versions
org.apache.atlas:apache-atlas Maven	`≥ 2.0.0, < 2.4.0`	`2.4.0`
atlas apache	`≥ 2.0.0, < 2.4.0`	`2.4.0`

Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

NVD description

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2024-46910 · ADVISORY
apache/atlas · PACKAGE
lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy · WEB
openwall.com/lists/oss-security/2025/02/12/2 · WEB

org.apache.atlas:apache-atlas 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.atlas:apache-atlas

Maven

≥ 2.0.0, < 2.4.0

2.4.0

atlas

apache

≥ 2.0.0, < 2.4.0

2.4.0

Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

NVD description

org.apache.atlas:apache-atlas 的其他漏洞

查看全部 →