Description
Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Ranger | 2.3.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.ranger:ranger | >= 2.3.0, < 2.4.0 | 2.4.0 | GHSA-89gw-cffj-mqg9 |
References
- https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6 vendor-advisory