Description
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Atlas | 0.8.4 – < 2.3.0 | 2.3.0 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.atlas:apache-atlas | >= 0.8.4, < 2.3.0 | 2.3.0 | GHSA-p782-4j23-xqcg |
References
- https://lists.apache.org/thread/0rqvcxo6brmos9w3lzfsdn2lsmlblpw3 vendor-advisory