CVE-2024-45478

Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

Score

CVSS 3.1 4.8 Medium

Status

Modified - security@apache.org

Published

2025-01-21

Last modified

2025-06-10

Weaknesses

CWE-79

Affected products

• Ranger (Apache)
• Apache Ranger (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
• http://www.openwall.com/lists/oss-security/2025/01/21/3