Description

An authenticated user can perform XSS. This issue affects Apache Atlas versions 2.4.0 and earlier. Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Weaknesses

  • CWE-80 — CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Affected products

VendorProductVersions
Apache Software FoundationApache Atlas0 to <=2.4.0

References

Authoritative sources

This page is a snapshot. For the latest enrichment and updates, view the record on CVE.org or the NVD.

Generated from the official CVE List on 22 Jun 2026 14:43 UTC.