You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@atlas.apache.org by Madhan Neethiraj <ma...@apache.org> on 2022/12/14 01:07:22 UTC

CVE-2022-34271: Apache Atlas: zip path traversal in import functionality

Severity: moderate

Description:

A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem.  This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.

This issue is being tracked as ATLAS-4622 

Credit:

Huangzhicong (finder)

References:

https://atlas.apache.org/
https://www.cve.org/CVERecord?id=CVE-2022-34271
https://issues.apache.org/jira/browse/ATLAS-4622