Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/04 3:17 p.m.10 views

CVE-2026-40563 Apache Atlas: Script injection allows access to unintended data

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect...

8.1CVSS6AI score
SaveExploits0References5
Rows per page
Query Builder