CVE-2024-45478
Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
概要
Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory cwiki.apache.org
- advisory github.com
- advisory nvd.nist.gov
- web openwall.com