CVE-2024-45478CWE-79

Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input

Medium · published January 21, 2025

CVSS v3.1
4.8
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.

Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00559 · 45.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-01-21T21:25Z
EPSS history
Timeline
  • 21 JAN 21:25Z
    Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
    cvelistv5