Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-55532 EUVD-2025-5507GHSA-2h4w-p9fh-9rmv

Apache Ranger: Improper Neutralization of Formula Elements in a CSV File

Published Mar 3, 2025 · Updated Mar 4, 2025 · Assigned by apache

Description

Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0.
Users are recommended to upgrade to version 2.6.0, which fixes this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Ranger ≤ 2.5.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.ranger:security-admin-web < 2.6.0 2.6.0 GHSA-2h4w-p9fh-9rmv

References