CVE-2024-46910

Summary

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

Affected Software

Weaknesses

• CWE-80: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

ADP Enrichment

CVE Program Container

Additional References

• http://www.openwall.com/lists/oss-security/2025/02/12/2

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy

• ←Previous
• Next→