CVE-2024-45479

SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.

Score

CVSS 3.1 9.1 Critical

Status

Modified - security@apache.org

Published

2025-01-21

Last modified

2025-06-10

Weaknesses

CWE-918

Affected products

• Ranger (Apache)
• Apache Ranger (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
• http://www.openwall.com/lists/oss-security/2025/01/21/4