K000160726: Apache Ranger vulnerability CVE-2025-59059

Security Advisory Description Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions = 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue. CVE-2025-59059 Impact There is no impact; F5 products are not affected by this...

Exploit for Code Injection in Apache Ranger

CVE-2025-59059: Misattributed RCE in Apache Ranger a correcti...

CVE-2025-59059 vulnerabilities

Vulnerabilities for packages: druid, trino...

org.apache.nifi.registry:nifi-registry-ranger-assembly (>=0.3.0, <=0.5.0), org.apache.nifi.registry:nifi-registry-ranger-plugin (>=0.3.0, <=0.5.0) +26 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.1.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.nifi.registry:nifi-registry-ranger-assembly =0.3.0, =0.3.0, =0.5.0 -...