oss-sec mailing list archives

CVE-2025-62198: Apache Atlas: Stored XSS in Create Entity page

From: Madhan Neethiraj <madhan () apache org>
Date: Sat, 20 Jun 2026 05:25:01 +0000

Severity: important 

Affected versions:

- Apache Atlas through 2.4.0

Description:

An authenticated user can perform XSS.

This issue affects Apache Atlas versions 2.4.0 and earlier.

Users are recommended to upgrade to version 2.5.0, which fixes the issue.

Credit:

Grzegorz Misiun (finder)

References:

https://atlas.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-62198

Current thread:

CVE-2025-62198: Apache Atlas: Stored XSS in Create Entity page Madhan Neethiraj (Jun 20)