What is GHSA-vrx2-mgr9-v67h?

GHSA-vrx2-mgr9-v67h is a security advisory published by GitHub Security Advisories with Medium severity. Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page

Which CVE IDs does GHSA-vrx2-mgr9-v67h cover?

GHSA-vrx2-mgr9-v67h covers the following CVE IDs: CVE-2024-45478. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-vrx2-mgr9-v67h?

GHSA-vrx2-mgr9-v67h has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

Which products are affected by GHSA-vrx2-mgr9-v67h?

GHSA-vrx2-mgr9-v67h affects 1 product, including: maven/org.apache.ranger:ranger:\u003c 2.5.0.

GHSA-vrx2-mgr9-v67hMediumCVSS 4.8

Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page

Vendor

GitHub Security Advisories

Published

January 22, 2025

Last Modified

June 10, 2025

🔗 CVE IDs covered (1)

CVE-2024-45478 →

📋 Description

Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

🎯 Affected products1

maven/org.apache.ranger:ranger:< 2.5.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-45478
https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
http://www.openwall.com/lists/oss-security/2025/01/21/3
https://github.com/advisories/GHSA-vrx2-mgr9-v67h