CVE-2024-46910CWE-80

Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

High · published February 13, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00569 · 46.4th percentile
Weakness
CWE-80 · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
Published
2025-02-13T08:52Z
EPSS history
Timeline
  • 13 FEB 08:52Z
    Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user
    cvelistv5