Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
โ€ขadded 2026/06/05 7:45 p.m.โ€ข6 views

CVE-2026-40563

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect...

8.1CVSS5.4AI score0.00028EPSS
Exploits0References1
Github Security Blog
Github Security Blog
โ€ขadded 2026/05/04 6:30 p.m.โ€ข15 views

Apache Atlas has a Code Injection Vulnerability

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas. Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data. Affected...

8.1CVSS5.8AI score0.00028EPSS
Exploits0References4Affected Software1
EUVD
EUVD
โ€ขadded 2026/05/04 3:17 p.m.โ€ข3 views

EUVD-2026-26979

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect...

7.1CVSS5.8AI score0.00028EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
โ€ขadded 2026/05/04 3:17 p.m.โ€ข2 views

CVE-2026-40563

Description: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Atlas Apache Atlas exposes a DSL search endpoint that accepts user-supplied query strings. Attacker can alter Gremlin traversal logic within grammar-allowed characters to access unintended data Affect...

7.1CVSS5.8AI score0.00028EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
โ€ขadded 2026/05/04 12:0 a.m.โ€ข6 views

Apache Atlas ไปฃ็ ๆณจๅ…ฅๆผๆดž

Apache Atlas is a scalable and extensible core feature governance service developed by the Apache Foundation in the United States. Version 0.8 to 2.4.0 of Apache Atlas contains a code injection vulnerability. This vulnerability stems from the DSL search endpoint accepting query strings provided b...

8.1CVSS5.9AI score0.00028EPSS
Exploits0References1
Rows per page
Query Builder