Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-45478


Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0. Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.


Published

2025-01-21T22:15:12.137

Last Modified

2025-06-10T09:15:22.687

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.8 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
  • Type: Secondary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache ranger < 2.5.0 Yes

References