Description

Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.

Remediation

References

https://lists.apache.org/thread.html/ra468036f913be41b0c8fea74f91d53e273b0bfa838a4b140a5dcd463%40%3Cuser.atlas.apache.org%3E

Related Vulnerabilities

CVE-2023-43502 Vulnerability in maven package com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

CVE-2021-26920 Vulnerability in maven package org.apache.druid:druid-core

CVE-2022-22950 Vulnerability in maven package org.springframework:spring-core

CVE-2020-2266 Vulnerability in maven package org.jenkins-ci.plugins:description-column-plugin

CVE-2022-23107 Vulnerability in maven package io.jenkins.plugins:warnings-ng

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Mailing List Vendor Advisory