Advisoriesby IbisatlasGHSA-h6xq-3h62-99qx
Cross-site scripting in Apache Atlas
Fix: upgrade to 2.1.0 or later
Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| org.apache.atlas:apache-atlas Maven | < 2.1.0 | 2.1.0 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-79
- Also known as
- CVE-2020-13928
More atlas advisories
All atlas
Apache Atlas has a Code Injection VulnerabilityCVE-2026-40563fixed in 2.5.0Apache Atlas: An authenticated user can perform XSS and potentially impersonate another userCVE-2024-46910fixed in 2.4.0Apache Atlas: zip path traversal in import functionalityCVE-2022-34271fixed in 2.3.0Stored XSS in Apache AtlasCVE-2019-10070fixed in 0.8.4 +1Apache Atlas versions 0.6.0CVE-2016-8752no fix yetApache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookiesCVE-2017-3150no fix yet