Skip to content
OpenAdvisories
High · 7.1 CVE-2024-46910 EUVD-2025-4909GHSA-x3v6-f5fr-4wwv

Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

Published Feb 13, 2025 · Updated Oct 17, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Atlas Package: org.apache.atlas:apache-atlas Ecosystem: Maven

Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Atlas 2.0.0 – ≤ 2.3.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.atlas:apache-atlas >= 2.0.0, < 2.4.0 2.4.0 GHSA-x3v6-f5fr-4wwv

References