Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-62198 EUVD-2025-210296GHSA-v73p-f52r-fmmr

Apache Atlas: Stored XSS in Create Entity page

Published Jun 22, 2026 · Updated Jun 22, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Atlas Package: org.apache.atlas:atlas-dashboardv2 Ecosystem: Maven

Description

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Atlas ≤ 2.4.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.atlas:atlas-dashboardv2 < 2.5.0 2.5.0 GHSA-v73p-f52r-fmmr

References