PT-2025-6693 · Apache · Apache Atlas

·

CVE-2024-46910

·

Published

2025-02-12

·

Updated

2025-07-14

CVSS v3.1

7.1

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Name of the Vulnerable Software and Affected Versions Apache Atlas versions 2.3.0 and earlier
Description An authenticated user can perform XSS and potentially impersonate another user. This issue allows for cross-site scripting attacks, which could lead to unauthorized actions being taken on behalf of other users.
Recommendations For Apache Atlas versions 2.3.0 and earlier, upgrade to version 2.4.0, which fixes the issue. As a temporary workaround, consider restricting access to sensitive features that could be exploited through XSS attacks until the update is applied.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-46910
GHSA-X3V6-F5FR-4WWV

Affected Products

Apache Atlas