org.apache.atlas:apache-atlas

3 results · Clear filters · Feed

• High 8.1
  CVE-2026-40563

  Apache Atlas: Script injection allows access to unintended data

  Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed charact…

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  May 4, 2026
• High 7.1
  CVE-2024-46910

  Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

  An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  Feb 13, 2025
• High 8.8
  CVE-2022-34271

  Apache Atlas: zip path traversal in import functionality

  A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

  Apache Software Foundation Apache Atlas org.apache.atlas:apache-atlas Maven
  Dec 14, 2022