CVE-2022-45048

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-45048

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-45048.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2022-45048

Aliases

GHSA-89gw-cffj-mqg9

Published

2023-05-05T08:15:09Z

Modified

2024-10-15T20:50:37.910810Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Authenticated users with appropriate privileges can create policies having expressions that can exploit code execution vulnerability. This issue affects Apache Ranger: 2.3.0. Users are recommended to update to version 2.4.0.

References

https://lists.apache.org/thread/6rpzwy1smdhr60tsh1ydknn3kdm45bb6

Affected packages

Git / github.com/apache/ranger

Affected ranges

Type: GIT
Repo: https://github.com/apache/ranger
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

ce3339c8ab653d99382caba9b2e5f306a7118561

Affected versions

ranger-0.*

ranger-0.4.0-rc0

ranger-0.5.0-rc1

ranger-0.5.0-rc2

ranger-0.5.0-rc3

ranger-0.6.0-rc1

release-2.*

release-2.1.0-rc0

release-2.2.0-rc0

release-2.2.0-rc1

release-2.2.0-rc2

release-2.3.0-rc0

release-2.3.0-rc1

release-2.3.0-rc2

release-2.3.0-rc3

release-ranger-2.*

release-ranger-2.1.0

release-ranger-2.2.0

release-ranger-2.3.0