GHSA-g9gf-g5jq-9h3v
GitHub Security Advisory
Apache Ranger UI vulnerable to Server Side Request Forgery
✓ GitHub Reviewed
CRITICAL
Has CVE
Advisory Details
SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Affected Packages
Maven
org.apache.ranger:ranger
Affected versions:
0
(fixed in 2.5.0)
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: September 13, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.