CVE-2022-45048

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.

Score

CVSS 3.1 8.8 High

Status

Modified - security@apache.org

Published

2023-05-05

Last modified

2024-10-15

Weaknesses

CWE-74

Affected products

• Ranger (Apache)
• Apache Ranger (Apache Software Foundation)

References

• https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6