You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Madhan Neethiraj <ma...@apache.org> on 2026/06/20 05:25:01 UTC

CVE-2025-62198: Apache Atlas: Stored XSS in Create Entity page

Severity: important 

Affected versions:

- Apache Atlas through 2.4.0

Description:

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Credit:

Grzegorz Misiun (finder)

References:

https://atlas.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-62198