CVE-2022-45048
Apache Ranger: code execution vulnerability in policy expressions
Summary
Apache Ranger: code execution vulnerability in policy expressions
Original description
The description as published by the source.
Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov