CVE-2024-55532

Improper Neutralization of Formula Elements in Export CSV feature of Apache Ranger in Apache Ranger Version < 2.6.0. Users are recommended to upgrade to version 2.6.0, which fixes this issue.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@apache.org

Published

2025-03-03

Last modified

2025-03-04

Weaknesses

CWE-1236

Affected products

• Ranger (Apache)
• Apache Ranger (Apache Software Foundation)

References

• https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger
• http://www.openwall.com/lists/oss-security/2025/03/03/2