CVE-2024-45478
Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
Summary
Apache Ranger: Stored XSS in Edit Service page - Add logic to validate user input
Original description
The description as published by the source.
Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory cwiki.apache.org
- advisory github.com
- advisory nvd.nist.gov
- web openwall.com