169 matches found
cve-2019-10070-apache-atlas-xss
此存储库没有 README。...
CVE-2026-50622
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
CVE-2026-50622 Apache Atlas: Missing Authorization on Admin Endpoints
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
EUVD-2026-50237
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
CVE-2026-50622
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
CVE-2026-50622 Apache Atlas: Missing Authorization on Admin Endpoints
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
CVE-2026-50622
A missing authorization vulnerability exists in Apache Atlas affecting versions 0.8 through 2.5.0 . The flaw allows any authenticated user to bypass role-based access controls and perform administrative operations on the system's admin endpoints . To remediate this issue, users are recommended to...
CVE-2026-50622 Apache Atlas: Missing Authorization on Admin Endpoints
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
CVE-2026-50622: Missing Authorization
Description: Missing Authorization in Apache Atlas. A missing authorization vulnerability in Apache Atlas's admin endpoints allows any authenticated user, regardless of their assigned role, to perform administrative operations. Affect Version: This issue affects Apache Atlas: from 0.8 through...
PT-2026-65743
Name of the Vulnerable Software and Affected Versions Apache Atlas versions 0.8 through 2.5.0 Description Missing authorization in admin endpoints allows any authenticated user to perform administrative operations, regardless of their assigned role. Recommendations Upgrade to version 2.6.0...
Apache Atlas UI: Authenticated User XSS
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
GHSA-V73P-F52R-FMMR Apache Atlas UI: Authenticated User XSS
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
EUVD-2025-210296
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198
Apache Atlas versions 2.4.0 and earlier are vulnerable to Stored Cross-Site Scripting (XSS) within the UI component , specifically on the Create Entity page . The vulnerability occurs because user-supplied input is not properly sanitized or escaped before being rendered in the browser. An authent...
CVE-2025-62198 Apache Atlas: Stored XSS in Create Entity page
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198 Apache Atlas: Stored XSS in Create Entity page
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198 Apache Atlas: Stored XSS in Create Entity page
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...
CVE-2025-62198: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue...