VULNERABILITY INTELLIGENCE

CVE-2024-46910

CVSS score7.1 HIGH

EPSS probability0.57%

CISA KEVNot currently listed

Published2025-02-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Description

An authenticated user can perform XSS and potentially impersonate another user. This issue affects Apache Atlas versions 2.3.0 and earlier. Users are recommended to upgrade to version 2.4.0, which fixes the issue.

Weakness classification

security@apache.org: CWE-80

Primary references

security@apache.org — Issue Tracking, Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory