CVE-2022-45048
Apache Ranger: code execution vulnerability in policy expressions
Résumé
Apache Ranger: code execution vulnerability in policy expressions
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov