org.apache.atlas:apache-atlas

5 results · Feed

• High 8.1
  CVE-2026-40563

  Apache Atlas: Script injection allows access to unintended data

  Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed charact…

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  May 4, 2026
• High 7.1
  CVE-2024-46910

  Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

  An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  Feb 13, 2025
• High 8.8
  CVE-2022-34271

  Apache Atlas: zip path traversal in import functionality

  A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  Dec 14, 2022
• Medium 6.1
  CVE-2020-13928

  Cross-site scripting in Apache Atlas

  Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

  org.apache.atlas:apache-atlas Maven
  Sep 16, 2020
• Medium 6.1
  CVE-2019-10070 Public exploit

  Stored XSS in Apache Atlas

  Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality

  Apache Atlas org.apache.atlas:apache-atlas Maven
  Nov 18, 2019