GHSA-v73p-f52r-fmmr

Source

https://github.com/advisories/GHSA-v73p-f52r-fmmr

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-v73p-f52r-fmmr/GHSA-v73p-f52r-fmmr.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-v73p-f52r-fmmr

Aliases

CVE-2025-62198

Published

2026-06-22T09:30:45Z

Modified

2026-09-11T22:15:04Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Apache Atlas UI: Authenticated User XSS

Details

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Database specific

{
    "cwe_ids":  [
        "CWE-80"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-09-11T22:05:26Z",
    "nvd_published_at":  "2026-06-22T08:16:35Z",
    "severity":  "MODERATE"
}

References

Affected packages

Maven / org.apache.atlas:atlas-dashboardv2

Package

Name: org.apache.atlas:atlas-dashboardv2; View open source insights on deps.dev
Purl: pkg:maven/org.apache.atlas/atlas-dashboardv2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.5.0

Affected versions

0.*

0.7-incubating

0.7.1-incubating

0.8-incubating

0.8.1

0.8.2

0.8.3

0.8.4

1.*

1.0.0-alpha

1.0.0

1.1.0

1.2.0

2.*

2.0.0

2.1.0

2.2.0

2.3.0

2.4.0

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/06/GHSA-v73p-f52r-fmmr/GHSA-v73p-f52r-fmmr.json"