GHSA-vrx2-mgr9-v67h
GitHub Security Advisory
Apache Ranger has Stored Cross-site Scripting vulnerability in Edit Service Page
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
Affected Packages
Maven
org.apache.ranger:ranger
Affected versions:
0
(fixed in 2.5.0)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 10, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.