What is GHSA-x3v6-f5fr-4wwv?

GHSA-x3v6-f5fr-4wwv is a security advisory published by GitHub Security Advisories with Medium severity. Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

Which CVE IDs does GHSA-x3v6-f5fr-4wwv cover?

GHSA-x3v6-f5fr-4wwv covers the following CVE IDs: CVE-2024-46910. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x3v6-f5fr-4wwv?

GHSA-x3v6-f5fr-4wwv has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

Which products are affected by GHSA-x3v6-f5fr-4wwv?

GHSA-x3v6-f5fr-4wwv affects 1 product, including: maven/org.apache.atlas:apache-atlas:\u003e= 2.0.0, \u003c 2.4.0.

GHSA-x3v6-f5fr-4wwvMediumCVSS 7.1

Apache Atlas: An authenticated user can perform XSS and potentially impersonate another user

Vendor

GitHub Security Advisories

Published

February 13, 2025

Last Modified

February 13, 2025

🔗 CVE IDs covered (1)

CVE-2024-46910 →

📋 Description

An authenticated user can perform XSS and potentially impersonate another user.

This issue affects Apache Atlas versions 2.3.0 and earlier.

Users are recommended to upgrade to version 2.4.0, which fixes the issue.

🎯 Affected products1

maven/org.apache.atlas:apache-atlas:>= 2.0.0, < 2.4.0

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-46910
https://lists.apache.org/thread/sqzp34l4cdk21zoq5g31qlsvr7jvb1fy
http://www.openwall.com/lists/oss-security/2025/02/12/2
https://github.com/advisories/GHSA-x3v6-f5fr-4wwv